38c831c7fa2be98a309654fc24b0bdc92ae73cf5f38936349fe6378c89f0f342 | Triage

Sharing

General

Target

UpdaterBrowser-truncated.exe
Size

720KB
Sample

230206-s714dahh7s
MD5

d7feb463537816ecd8b5d53082a1acca
SHA1

c3a1a69dee4dac8abe320379f5bf3b000d8662f0
SHA256

38c831c7fa2be98a309654fc24b0bdc92ae73cf5f38936349fe6378c89f0f342
SHA512

a286a52e9451264032a997126157b243f87aee3d7c81f76bd390b70a2fba3be3d9d2a3b66ce3122923def56e2fc2b80eb17f9cae3cdfb8844d629577f4a362a2
SSDEEP

12288:5zu4XEy4gCFSuv3umZv8Nb4pKrPL/NBkfDyHl23f3S431cconBuOhjSX:vX0VFSe+gENbjL/gg23f3l31cconBuOI

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  UpdaterBrowser-truncated.exe
- Size
  
  720KB
- MD5
  
  d7feb463537816ecd8b5d53082a1acca
- SHA1
  
  c3a1a69dee4dac8abe320379f5bf3b000d8662f0
- SHA256
  
  38c831c7fa2be98a309654fc24b0bdc92ae73cf5f38936349fe6378c89f0f342
- SHA512
  
  a286a52e9451264032a997126157b243f87aee3d7c81f76bd390b70a2fba3be3d9d2a3b66ce3122923def56e2fc2b80eb17f9cae3cdfb8844d629577f4a362a2
- SSDEEP
  
  12288:5zu4XEy4gCFSuv3umZv8Nb4pKrPL/NBkfDyHl23f3S431cconBuOhjSX:vX0VFSe+gENbjL/gg23f3l31cconBuOI
Score

7^/10

discovery spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Suspicious use of SetThreadContext
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer