ae6734e01ba72f13b7a872f994a6e74cfbbabf2ed8610d647b683f30bf2fe312 | Triage

Sharing

General

Target

ae6734e01ba72f13b7a872f994a6e74cfbbabf2ed8610d647b683f30bf2fe312
Size

920KB
Sample

221124-zlgaeahc22
MD5

e5b551bdb5dec97fce7f80b796e5a76b
SHA1

47709a4de2b689f00877cd553ea5731e401975cd
SHA256

ae6734e01ba72f13b7a872f994a6e74cfbbabf2ed8610d647b683f30bf2fe312
SHA512

6a11619192552d45bf84d2298aa692e60ab6924c19351d05b64d523444b75a59ce436afae0a39f30f3badaee5d3d05d8f16d3e81b17fe8a482568a944faa4ab5
SSDEEP

24576:h1OYdaODMtdHAqcdDVhYwiei7+EpFAh/kKn:h1Os2PHVmVhYwiLtKkKn

Score

8^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  ae6734e01ba72f13b7a872f994a6e74cfbbabf2ed8610d647b683f30bf2fe312
- Size
  
  920KB
- MD5
  
  e5b551bdb5dec97fce7f80b796e5a76b
- SHA1
  
  47709a4de2b689f00877cd553ea5731e401975cd
- SHA256
  
  ae6734e01ba72f13b7a872f994a6e74cfbbabf2ed8610d647b683f30bf2fe312
- SHA512
  
  6a11619192552d45bf84d2298aa692e60ab6924c19351d05b64d523444b75a59ce436afae0a39f30f3badaee5d3d05d8f16d3e81b17fe8a482568a944faa4ab5
- SSDEEP
  
  24576:h1OYdaODMtdHAqcdDVhYwiei7+EpFAh/kKn:h1Os2PHVmVhYwiLtKkKn
Score

8^/10

discovery spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops Chrome extension
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer