Overview

overview

10

Static

static

galadriel

windows7_x64

10

Resubmissions

01/07/2020, 13:24

200701-3ayryqmz2610

30/06/2020, 05:41

200630-m1a6tbcjt210

Sharing

Copy URL Twitter E-mail

General

  • Target
    data.bin
  • Size 119KB
  • Sample200701-3ayryqmz26
  • SHA256 471325daa2bc75f50856e93e9de088386556fc3ead653894d5c2a67f2a8b4975
  • MD5 SHA1 SHA512
Score
10/10
discoveryevasionpersistencespywaretrojan

Malware Config

Targets

    • Target
      data.bin
    • Size 119KB
    • SHA256 471325daa2bc75f50856e93e9de088386556fc3ead653894d5c2a67f2a8b4975
    • MD5 SHA1 SHA512
    Score
    10/10
    spywarepersistenceevasiontrojandiscovery

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spyware

    • Checks for installed software on the system

      discovery

    • Enumerates connected drives

    • Modifies system certificate store

      evasionspywaretrojan
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks