Overview

overview

7

Static

static

3

f9ed5c0894...17.exe

windows7-x64

7

f9ed5c0894...17.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f9ed5c0894302f47b8788d77a2dcc475d9d7ad4ededc063b47be3ee08359d617

  • Size

    1.8MB

  • Sample

    240428-k71hvacd88

  • MD5

    57c03b365a011681bbd71794496b596e

  • SHA1

    e1b5081913320faaee1c44bc1a7311a7b274b37f

  • SHA256

    f9ed5c0894302f47b8788d77a2dcc475d9d7ad4ededc063b47be3ee08359d617

  • SHA512

    38f4388beec81aabe281b6b809a09cc234633ac4d30c280ac2684c846bfbbb0c8d93fef7f0d169d1cb050edad82693824d4b98504d3e6a3f4b87959842094ab8

  • SSDEEP

    49152:Hx5SUW/cxUitIGLsF0nb+tJVYleAMz77+WAlaB0zj0yjoB2:HvbjVkjjCAzJtB2Yyjl

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      f9ed5c0894302f47b8788d77a2dcc475d9d7ad4ededc063b47be3ee08359d617

    • Size

      1.8MB

    • MD5

      57c03b365a011681bbd71794496b596e

    • SHA1

      e1b5081913320faaee1c44bc1a7311a7b274b37f

    • SHA256

      f9ed5c0894302f47b8788d77a2dcc475d9d7ad4ededc063b47be3ee08359d617

    • SHA512

      38f4388beec81aabe281b6b809a09cc234633ac4d30c280ac2684c846bfbbb0c8d93fef7f0d169d1cb050edad82693824d4b98504d3e6a3f4b87959842094ab8

    • SSDEEP

      49152:Hx5SUW/cxUitIGLsF0nb+tJVYleAMz77+WAlaB0zj0yjoB2:HvbjVkjjCAzJtB2Yyjl

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

System Information Discovery

3
T1082

Query Registry

3
T1012

Peripheral Device Discovery

1
T1120

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks