1be96f03dd3949b6189a9b587be664b9cef82bf9244a1a6ca8733f4623f4480d | Triage

Sharing

General

Target

1be96f03dd3949b6189a9b587be664b9cef82bf9244a1a6ca8733f4623f4480d
Size

2.9MB
Sample

221125-yg19cadh7y
MD5

e23e613ac6a0de1c0a2ab36e73ef608a
SHA1

71547887582042230100df64ea1dad5fe4e0fc0d
SHA256

1be96f03dd3949b6189a9b587be664b9cef82bf9244a1a6ca8733f4623f4480d
SHA512

912298142de3d07a84d9400cdae96b689a68879dc1da5c0b7299bfc2213d391f625d9ad807cd6358c93fe427dbdb1741335ad38b28d6da951a7a0aeaf0870546
SSDEEP

49152:UIryXfY8QbwV8G9d6bOO0bZdKHkLWyCPOx6oC4G2:z8fLwGhO0bHuKNv

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  1be96f03dd3949b6189a9b587be664b9cef82bf9244a1a6ca8733f4623f4480d
- Size
  
  2.9MB
- MD5
  
  e23e613ac6a0de1c0a2ab36e73ef608a
- SHA1
  
  71547887582042230100df64ea1dad5fe4e0fc0d
- SHA256
  
  1be96f03dd3949b6189a9b587be664b9cef82bf9244a1a6ca8733f4623f4480d
- SHA512
  
  912298142de3d07a84d9400cdae96b689a68879dc1da5c0b7299bfc2213d391f625d9ad807cd6358c93fe427dbdb1741335ad38b28d6da951a7a0aeaf0870546
- SSDEEP
  
  49152:UIryXfY8QbwV8G9d6bOO0bZdKHkLWyCPOx6oC4G2:z8fLwGhO0bHuKNv
Score

7^/10

discovery spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops Chrome extension
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer