a43e40250ecb62db9c7267968e9d238480a5c1fa5c9de8e60854b5a9bcde151c | Triage

Sharing

General

Target

a43e40250ecb62db9c7267968e9d238480a5c1fa5c9de8e60854b5a9bcde151c
Size

920KB
Sample

221124-z5zk4ade5y
MD5

c8a6f2b34421e76109c412e4c765fd6a
SHA1

a15d447ccaf2e34a3280f3e89da9537b4a56ab04
SHA256

a43e40250ecb62db9c7267968e9d238480a5c1fa5c9de8e60854b5a9bcde151c
SHA512

52c873a16870c9279155a0aeb9df595e0f3766e3723d8ea864fa4871eb2bfe3519ca66c8af738d011e72946b753d286377812419b0a5d18f91a3fa8991f684c3
SSDEEP

24576:h1OYdaO5MtdHAqcdDVhYwiei7+EpFAh/kKW:h1OsoPHVmVhYwiLtKkKW

Score

8^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  a43e40250ecb62db9c7267968e9d238480a5c1fa5c9de8e60854b5a9bcde151c
- Size
  
  920KB
- MD5
  
  c8a6f2b34421e76109c412e4c765fd6a
- SHA1
  
  a15d447ccaf2e34a3280f3e89da9537b4a56ab04
- SHA256
  
  a43e40250ecb62db9c7267968e9d238480a5c1fa5c9de8e60854b5a9bcde151c
- SHA512
  
  52c873a16870c9279155a0aeb9df595e0f3766e3723d8ea864fa4871eb2bfe3519ca66c8af738d011e72946b753d286377812419b0a5d18f91a3fa8991f684c3
- SSDEEP
  
  24576:h1OYdaO5MtdHAqcdDVhYwiei7+EpFAh/kKW:h1OsoPHVmVhYwiLtKkKW
Score

8^/10

discovery spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops Chrome extension
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer