d8f57d9297582a17b7b271f8c528db019d65be5d9c94e401836588a1e4a9c311 | Triage

Sharing

General

Target

appeonbrowser.exe
Size

943KB
Sample

230724-jx3psaca6v
MD5

6ce6794762e600f20af74e81885dc18b
SHA1

a6c8ce316518a9af2324acfc23e04eb50e400dcf
SHA256

d8f57d9297582a17b7b271f8c528db019d65be5d9c94e401836588a1e4a9c311
SHA512

f50f680625fb3c6355a4de79a79830475f587184562d91c921c62d6a1ca61341c50e16afc6461aacf19f65621ff94bfccd7ce3a011bd6895619d37a097b12f82
SSDEEP

24576:eQiPoMBZ6lh4pEcDSbTNjdTSb4EL0uCWPlXg+p6MX//h18j5:e9PoA6IJSHNjZM0uDhg+lb81

Score

7^/10

discovery persistence spyware stealer

Malware Config

Targets

- Target
  
  appeonbrowser.exe
- Size
  
  943KB
- MD5
  
  6ce6794762e600f20af74e81885dc18b
- SHA1
  
  a6c8ce316518a9af2324acfc23e04eb50e400dcf
- SHA256
  
  d8f57d9297582a17b7b271f8c528db019d65be5d9c94e401836588a1e4a9c311
- SHA512
  
  f50f680625fb3c6355a4de79a79830475f587184562d91c921c62d6a1ca61341c50e16afc6461aacf19f65621ff94bfccd7ce3a011bd6895619d37a097b12f82
- SSDEEP
  
  24576:eQiPoMBZ6lh4pEcDSbTNjdTSb4EL0uCWPlXg+p6MX//h18j5:e9PoA6IJSHNjZM0uDhg+lb81
Score

7^/10

discovery persistence spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistencespywarestealer

behavioral2