c04c75b7bf899eb6d2a10af48229d7e32014176385b6b8bc6a9443b7c0b5c0a2 | Triage

Sharing

General

Target

c04c75b7bf899eb6d2a10af48229d7e32014176385b6b8bc6a9443b7c0b5c0a2
Size

932KB
Sample

221124-yjtbhseg99
MD5

1780380ab652681613831cb621501504
SHA1

252c25e65e6fdf882d262c0e823ef7f7fcf47e11
SHA256

c04c75b7bf899eb6d2a10af48229d7e32014176385b6b8bc6a9443b7c0b5c0a2
SHA512

fda0bb978b70937b4645955e40b7b9c2d69b178485d310f67420c2c07abd0b826e1efa8a6619864df182edf9cfc3a9da01e7499ca6497e6fb9b3a151549f2da8
SSDEEP

24576:h1OYdaO6CZ/iWCvu/2sWsJA/jlt+DHhsf:h1OskCpYO/dJJDHhsf

Score

8^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  c04c75b7bf899eb6d2a10af48229d7e32014176385b6b8bc6a9443b7c0b5c0a2
- Size
  
  932KB
- MD5
  
  1780380ab652681613831cb621501504
- SHA1
  
  252c25e65e6fdf882d262c0e823ef7f7fcf47e11
- SHA256
  
  c04c75b7bf899eb6d2a10af48229d7e32014176385b6b8bc6a9443b7c0b5c0a2
- SHA512
  
  fda0bb978b70937b4645955e40b7b9c2d69b178485d310f67420c2c07abd0b826e1efa8a6619864df182edf9cfc3a9da01e7499ca6497e6fb9b3a151549f2da8
- SSDEEP
  
  24576:h1OYdaO6CZ/iWCvu/2sWsJA/jlt+DHhsf:h1OskCpYO/dJJDHhsf
Score

8^/10

discovery spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops Chrome extension
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer