Overview

overview

8

Static

static

7620029100...in.exe

windows7_x64

8

7620029100...in.exe

windows10_x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    762002910000000.bin
  • Size 85KB
  • Sample200802-vbht9618he
  • SHA256 e1f3874c42cdd4e2c49477d7b2bc3ebd3bcd4e3a2cf882fa4d1ea09546c74f5d
  • MD5 SHA1 SHA512
Score
8/10
discoverypersistencespyware

Malware Config

Targets

    • Target
      762002910000000.bin
    • Size 85KB
    • SHA256 e1f3874c42cdd4e2c49477d7b2bc3ebd3bcd4e3a2cf882fa4d1ea09546c74f5d
    • MD5 SHA1 SHA512
    Score
    8/10
    spywarepersistencediscovery

    • Executes dropped EXE

    • Drops startup file

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spyware

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Enumerates connected drives

    • JavaScript code in executable

    • Modifies service

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks