143e0a809fea81df3a58ac922cd354e09e0db065e0f70e1c23ccafb58092ea15 | Triage

Sharing

General

Target

ChromeSetup.exe
Size

23.7MB
Sample

240624-njr4catanj
MD5

ebdaf82882b09264354b50e5e3a9dcd8
SHA1

89261d4a5ca5b5dba236c9e7b58a8c0a9e5e89aa
SHA256

143e0a809fea81df3a58ac922cd354e09e0db065e0f70e1c23ccafb58092ea15
SHA512

e835d91af4f10af4f3e012bb4f8c6c341b2bfa059c0dd3a427f4e838dd76a460b8349475599a672b668cec939bb797fd530983db4d5a1810aa73053bc4ff62a1
SSDEEP

393216:pw+CTxIpxlOxzZVwQTPS1F/bl8DtnzfBXhT05G989+CCau+AU90dimMBDqRr7cnv:pwJTxIkZGYOFj+D1zt5198QCCk6di5nv

Score

8^/10

persistence spyware stealer

Malware Config

Targets

- Target
  
  ChromeSetup.exe
- Size
  
  23.7MB
- MD5
  
  ebdaf82882b09264354b50e5e3a9dcd8
- SHA1
  
  89261d4a5ca5b5dba236c9e7b58a8c0a9e5e89aa
- SHA256
  
  143e0a809fea81df3a58ac922cd354e09e0db065e0f70e1c23ccafb58092ea15
- SHA512
  
  e835d91af4f10af4f3e012bb4f8c6c341b2bfa059c0dd3a427f4e838dd76a460b8349475599a672b668cec939bb797fd530983db4d5a1810aa73053bc4ff62a1
- SSDEEP
  
  393216:pw+CTxIpxlOxzZVwQTPS1F/bl8DtnzfBXhT05G989+CCau+AU90dimMBDqRr7cnv:pwJTxIkZGYOFj+D1zt5198QCCk6di5nv
Score

8^/10

persistence spyware stealer
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealer