482ea558750e25666db05c8ffcf0339c75243a4877f42da8ebe73964ee803d00 | Triage

Sharing

General

Target

482ea558750e25666db05c8ffcf0339c75243a4877f42da8ebe73964ee803d00
Size

920KB
Sample

221125-cf12asde99
MD5

545858907d96b291eb5b90bbb01307b0
SHA1

764309c4e1f9bfbe6e7107c65bcfb0a1026884ed
SHA256

482ea558750e25666db05c8ffcf0339c75243a4877f42da8ebe73964ee803d00
SHA512

41ad89f2eec67a1b002482c170a5e6cf338328b5d3e0710fd42f08fb11558ac741b16b859f397c56e8c22536359cb262d4def0e8d912904d9c925bbde7ea9b10
SSDEEP

24576:h1OYdaO5MtdHAqcdDVhYwiei7+EpFAh/kKT:h1Os8PHVmVhYwiLtKkKT

Score

8^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  482ea558750e25666db05c8ffcf0339c75243a4877f42da8ebe73964ee803d00
- Size
  
  920KB
- MD5
  
  545858907d96b291eb5b90bbb01307b0
- SHA1
  
  764309c4e1f9bfbe6e7107c65bcfb0a1026884ed
- SHA256
  
  482ea558750e25666db05c8ffcf0339c75243a4877f42da8ebe73964ee803d00
- SHA512
  
  41ad89f2eec67a1b002482c170a5e6cf338328b5d3e0710fd42f08fb11558ac741b16b859f397c56e8c22536359cb262d4def0e8d912904d9c925bbde7ea9b10
- SSDEEP
  
  24576:h1OYdaO5MtdHAqcdDVhYwiei7+EpFAh/kKT:h1Os8PHVmVhYwiLtKkKT
Score

8^/10

discovery spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops Chrome extension
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer