55754cf5a5728edbebf18da0805ecbf1893ce44138e0e60a9e91efdc224e1b0b | Triage

Sharing

General

Target

55754cf5a5728edbebf18da0805ecbf1893ce44138e0e60a9e91efdc224e1b0b
Size

799KB
Sample

221125-11ewkadc7v
MD5

d3aa0f287e10093b38d7ebc2d666a3f2
SHA1

275556fb3cb99a169b564d92e8de89939435d7c8
SHA256

55754cf5a5728edbebf18da0805ecbf1893ce44138e0e60a9e91efdc224e1b0b
SHA512

aa44d3a357f0ce76751ea8ab1c7ce0b2a28791ac675d7b7280c3699c615bfa531e21e480ca658f7759d8685a90aa07a7605798a874b7cd0770c5b38a589b29ac
SSDEEP

24576:h1OYdaOwSF5ve9uhPmFZO3htj3sqMEsIg2dHMLbDpdUJ4uKGv5NCPCoupDxkxoKg:h1Os+Fo42dYDe4NCD

Score

8^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  55754cf5a5728edbebf18da0805ecbf1893ce44138e0e60a9e91efdc224e1b0b
- Size
  
  799KB
- MD5
  
  d3aa0f287e10093b38d7ebc2d666a3f2
- SHA1
  
  275556fb3cb99a169b564d92e8de89939435d7c8
- SHA256
  
  55754cf5a5728edbebf18da0805ecbf1893ce44138e0e60a9e91efdc224e1b0b
- SHA512
  
  aa44d3a357f0ce76751ea8ab1c7ce0b2a28791ac675d7b7280c3699c615bfa531e21e480ca658f7759d8685a90aa07a7605798a874b7cd0770c5b38a589b29ac
- SSDEEP
  
  24576:h1OYdaOwSF5ve9uhPmFZO3htj3sqMEsIg2dHMLbDpdUJ4uKGv5NCPCoupDxkxoKg:h1Os+Fo42dYDe4NCD
Score

8^/10

discovery spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops Chrome extension
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer