a3962232864cbcd0a0e1fd881dd070014a91e8caa4a1fe8071529f650874b1fb | Triage

Sharing

General

Target

a3962232864cbcd0a0e1fd881dd070014a91e8caa4a1fe8071529f650874b1fb
Size

920KB
Sample

221124-z62rvadf2t
MD5

0978d48df54d3273fdaabc6cd56e66fb
SHA1

551fa07969e4da138f4791af25e6ea9d1e3d753a
SHA256

a3962232864cbcd0a0e1fd881dd070014a91e8caa4a1fe8071529f650874b1fb
SHA512

ffd0bd24b6b6b2347b4e5b57c16e10266a0b5d0aa844f6d542557246c25b5ee1fba83cfab164f21343a8d9f0135ef5d0224ecae006280613b06a58c4ddab72d8
SSDEEP

24576:h1OYdaOTCZ/iWCvu/2sWsJA/jlt+DHhsF:h1OsFCpYO/dJJDHhsF

Score

8^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  a3962232864cbcd0a0e1fd881dd070014a91e8caa4a1fe8071529f650874b1fb
- Size
  
  920KB
- MD5
  
  0978d48df54d3273fdaabc6cd56e66fb
- SHA1
  
  551fa07969e4da138f4791af25e6ea9d1e3d753a
- SHA256
  
  a3962232864cbcd0a0e1fd881dd070014a91e8caa4a1fe8071529f650874b1fb
- SHA512
  
  ffd0bd24b6b6b2347b4e5b57c16e10266a0b5d0aa844f6d542557246c25b5ee1fba83cfab164f21343a8d9f0135ef5d0224ecae006280613b06a58c4ddab72d8
- SSDEEP
  
  24576:h1OYdaOTCZ/iWCvu/2sWsJA/jlt+DHhsF:h1OsFCpYO/dJJDHhsF
Score

8^/10

discovery spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops Chrome extension
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer