a608826575889e75ec5b07778e6a21551f4a4700931522f5e1127464c82a4403 | Triage

Sharing

General

Target

a608826575889e75ec5b07778e6a21551f4a4700931522f5e1127464c82a4403
Size

920KB
Sample

221124-z227tadc8w
MD5

ad6ad0b89f9f1e2d56bedf495f17a197
SHA1

d996babad9763f1b986162952685e58a90b18d9c
SHA256

a608826575889e75ec5b07778e6a21551f4a4700931522f5e1127464c82a4403
SHA512

f2fd0e1ac5b66706bdeb806a8d583826613b43168d1d939e86ddd55dc53b6f76f54972f6c7795e7a1117e7132acc945b53711efcb4de5f0cf84bf845a22bdd92
SSDEEP

24576:h1OYdaOlMtdHAqcdDVhYwiei7+EpFAh/kKk:h1Os8PHVmVhYwiLtKkKk

Score

8^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  a608826575889e75ec5b07778e6a21551f4a4700931522f5e1127464c82a4403
- Size
  
  920KB
- MD5
  
  ad6ad0b89f9f1e2d56bedf495f17a197
- SHA1
  
  d996babad9763f1b986162952685e58a90b18d9c
- SHA256
  
  a608826575889e75ec5b07778e6a21551f4a4700931522f5e1127464c82a4403
- SHA512
  
  f2fd0e1ac5b66706bdeb806a8d583826613b43168d1d939e86ddd55dc53b6f76f54972f6c7795e7a1117e7132acc945b53711efcb4de5f0cf84bf845a22bdd92
- SSDEEP
  
  24576:h1OYdaOlMtdHAqcdDVhYwiei7+EpFAh/kKk:h1Os8PHVmVhYwiLtKkKk
Score

8^/10

discovery spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops Chrome extension
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2