a6739dbe9ece426742088566b9aa946e5339042ed8fc12ddfa7b75a3c3f840f4 | Triage

Sharing

General

Target

a6739dbe9ece426742088566b9aa946e5339042ed8fc12ddfa7b75a3c3f840f4
Size

920KB
Sample

221124-z2h4yadc51
MD5

93f4639b157d34d5ea8be6af67e608d7
SHA1

2a0a5da47a0a65747d5b20589ff92b2dc95ec946
SHA256

a6739dbe9ece426742088566b9aa946e5339042ed8fc12ddfa7b75a3c3f840f4
SHA512

bcf38a4d640f232081c5f0c7c201570bf4ce146484edebac9a76f3c0e0760ad2dc9d9994a7662cfe994e9ba04776479ca4ff19e29c5f4a8268b7fd35ef16eb4d
SSDEEP

24576:h1OYdaO3MtdHAqcdDVhYwiei7+EpFAh/kKw:h1Os2PHVmVhYwiLtKkKw

Score

8^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  a6739dbe9ece426742088566b9aa946e5339042ed8fc12ddfa7b75a3c3f840f4
- Size
  
  920KB
- MD5
  
  93f4639b157d34d5ea8be6af67e608d7
- SHA1
  
  2a0a5da47a0a65747d5b20589ff92b2dc95ec946
- SHA256
  
  a6739dbe9ece426742088566b9aa946e5339042ed8fc12ddfa7b75a3c3f840f4
- SHA512
  
  bcf38a4d640f232081c5f0c7c201570bf4ce146484edebac9a76f3c0e0760ad2dc9d9994a7662cfe994e9ba04776479ca4ff19e29c5f4a8268b7fd35ef16eb4d
- SSDEEP
  
  24576:h1OYdaO3MtdHAqcdDVhYwiei7+EpFAh/kKw:h1Os2PHVmVhYwiLtKkKw
Score

8^/10

discovery spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops Chrome extension
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2