6d70ca9a416eacdd1be285db56f53d103e93d249ad82d8c50adcfc5efc7085c8 | Triage

Sharing

General

Target

6d70ca9a416eacdd1be285db56f53d103e93d249ad82d8c50adcfc5efc7085c8
Size

1.5MB
Sample

230330-mc1w8scb76
MD5

88849192c25320c6b32cd1b782e13439
SHA1

8ffb695f155c66e5b54259b18907fbce95bd4487
SHA256

6d70ca9a416eacdd1be285db56f53d103e93d249ad82d8c50adcfc5efc7085c8
SHA512

a0be04be2b0dcbc474779246ab2f85b1cfeebd0d36e3c6e0b027c7c0365982a35d798be94172c0b2a9b1fee37d12728b81b82d914aebd897b14dcfb28172331a
SSDEEP

24576:nzZ46hi1NjKXHxHJjH+W/POx7E8CRums06rhEjg/Hr/xItLJPxRbab0G:nhhzRpjeW/mx7E8hlJ//L6tLvFaIG

Score

7^/10

discovery spyware stealer

Malware Config

Targets

- Target
  
  6d70ca9a416eacdd1be285db56f53d103e93d249ad82d8c50adcfc5efc7085c8
- Size
  
  1.5MB
- MD5
  
  88849192c25320c6b32cd1b782e13439
- SHA1
  
  8ffb695f155c66e5b54259b18907fbce95bd4487
- SHA256
  
  6d70ca9a416eacdd1be285db56f53d103e93d249ad82d8c50adcfc5efc7085c8
- SHA512
  
  a0be04be2b0dcbc474779246ab2f85b1cfeebd0d36e3c6e0b027c7c0365982a35d798be94172c0b2a9b1fee37d12728b81b82d914aebd897b14dcfb28172331a
- SSDEEP
  
  24576:nzZ46hi1NjKXHxHJjH+W/POx7E8CRums06rhEjg/Hr/xItLJPxRbab0G:nhhzRpjeW/mx7E8hlJ//L6tLvFaIG
Score

7^/10

discovery spyware stealer
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops Chrome extension
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryspywarestealer

behavioral2

discoveryspywarestealer