a78acd223f7c820cd93cb6b5c2da08717e070f31cbf13289fe233a26b6fc6857 | Triage

Sharing

General

Target

a78acd223f7c820cd93cb6b5c2da08717e070f31cbf13289fe233a26b6fc6857
Size

931KB
Sample

221124-zzbxvaaa78
MD5

93edfd05c09f3d1153af1bf391600c35
SHA1

e38d51ef0c2460c27b2174d54b98b0ee1db05dc2
SHA256

a78acd223f7c820cd93cb6b5c2da08717e070f31cbf13289fe233a26b6fc6857
SHA512

51d4291621edec498dd0e57d6814117e8f2455bf1635b1bbaaadd20f36239f191f8bb0807931ccc5f36cdda678b41f2bbffd72ec814a9487db2705fba89e58dd
SSDEEP

24576:h1OYdaOdCZ/iWCvu/2sWsJA/jlt+DHhsp:h1OsbCpYO/dJJDHhsp

Score

8^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  a78acd223f7c820cd93cb6b5c2da08717e070f31cbf13289fe233a26b6fc6857
- Size
  
  931KB
- MD5
  
  93edfd05c09f3d1153af1bf391600c35
- SHA1
  
  e38d51ef0c2460c27b2174d54b98b0ee1db05dc2
- SHA256
  
  a78acd223f7c820cd93cb6b5c2da08717e070f31cbf13289fe233a26b6fc6857
- SHA512
  
  51d4291621edec498dd0e57d6814117e8f2455bf1635b1bbaaadd20f36239f191f8bb0807931ccc5f36cdda678b41f2bbffd72ec814a9487db2705fba89e58dd
- SSDEEP
  
  24576:h1OYdaOdCZ/iWCvu/2sWsJA/jlt+DHhsp:h1OsbCpYO/dJJDHhsp
Score

8^/10

discovery spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops Chrome extension
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2