Overview

overview

8

Static

static

1

13cebb0d45...11.exe

windows7_x64

7

13cebb0d45...11.exe

windows10_x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    13cebb0d4520c89e6f5f2e411aec2711.exe
  • Size 393KB
  • Sample200706-v54k2qqxts
  • SHA256 cbdc01fe169217339ffacf85ad71f3bd77ac6ac62224158f3084e4eafe5c252b
  • MD5 SHA1 SHA512
Score
8/10
persistencespyware

Malware Config

Targets

    • Target
      13cebb0d4520c89e6f5f2e411aec2711.exe
    • Size 393KB
    • SHA256 cbdc01fe169217339ffacf85ad71f3bd77ac6ac62224158f3084e4eafe5c252b
    • MD5 SHA1 SHA512
    Score
    8/10
    spywarepersistence

    • Adds Run entry to policy start application

      persistence

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spyware

    • Adds Run entry to start application

      persistence

    • Modifies service

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks