General

  • Target

    2024-04-28_3669a5f05e725bbf652fdd99e63d466b_avoslocker

  • Size

    2.2MB

  • Sample

    240428-sxahnsag82

  • MD5

    3669a5f05e725bbf652fdd99e63d466b

  • SHA1

    d6dada8716d006dc8e92463c851fbb5cdaa4c91e

  • SHA256

    3bb0986fbd9dd0628f7b3ad3a0db3138f09470920d268ca2e46389746cf9382f

  • SHA512

    00c1b950afbc59bd9405f43ff9018e2675667c784a881312b73f43ab66d6c502df9e6e5c03d2e81f07db131666ff714248bd2a0d359774591261bc7461cbf88d

  • SSDEEP

    24576:YtLrcRh28ORSKVLgCLBVh1Tg/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:v0VRSgEYBVfTgLNiXicJFFRGNzj3

Score
7/10

Malware Config

Targets

    • Target

      2024-04-28_3669a5f05e725bbf652fdd99e63d466b_avoslocker

    • Size

      2.2MB

    • MD5

      3669a5f05e725bbf652fdd99e63d466b

    • SHA1

      d6dada8716d006dc8e92463c851fbb5cdaa4c91e

    • SHA256

      3bb0986fbd9dd0628f7b3ad3a0db3138f09470920d268ca2e46389746cf9382f

    • SHA512

      00c1b950afbc59bd9405f43ff9018e2675667c784a881312b73f43ab66d6c502df9e6e5c03d2e81f07db131666ff714248bd2a0d359774591261bc7461cbf88d

    • SSDEEP

      24576:YtLrcRh28ORSKVLgCLBVh1Tg/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:v0VRSgEYBVfTgLNiXicJFFRGNzj3

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

System Information Discovery

3
T1082

Query Registry

3
T1012

Peripheral Device Discovery

1
T1120

Collection

Data from Local System

1
T1005

Tasks