Overview

overview

7

Static

static

Cona Impor...FQ.exe

windows7_x64

7

Cona Impor...FQ.exe

windows10_x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target
    Cona Import Company-RFQ.exe
  • Size 484KB
  • Sample200624-5nw8f647qa
  • SHA256 cbd6e5626ae84385a9fc7a7eab1877be367ef0b69dc1c4a8de1f668ecb018ab2
  • MD5 SHA1 SHA512
Score
7/10
persistencespyware

Malware Config

Targets

    • Target
      Cona Import Company-RFQ.exe
    • Size 484KB
    • SHA256 cbd6e5626ae84385a9fc7a7eab1877be367ef0b69dc1c4a8de1f668ecb018ab2
    • MD5 SHA1 SHA512
    Score
    7/10
    persistencespyware

    • Deletes itself

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spyware

    • Adds Run entry to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks