0596f3f5c6ad91b60a540a67dc2271c02b28f7cc14534df0ce67427b0e5ee66a

Analysis

max time kernel
62s
max time network
34s
platform
windows7_x64
resource
win7
submitted
06-08-2020 19:22

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2020-01-08 114318.bin.exe
Size

378KB
MD5

54c24db7a6b6186a5727042d7094c000
SHA1

c5b1d7d7ee1cfedf230dcf2106986afd1ab0eb06
SHA256

daccb68f01c806839d025c4d8ffda45357767e1dcc467d29f59cf64159176ab9
SHA512

7f842cfc37fbd35bf8337019170c8ba5119bf196190f07267a17be94d6d1699f027f17ba570d5c9fc10d5134a1b33c73ba88d7f1b867b29e66d91e10a84629f1

Score

7^/10

persistence spyware

Malware Config

Signatures

Adds Run key to start application 2 TTPs 2 IoCs

persistence

Registry Run Keys / Startup Folder

T1060

Modify Registry

T1112

Processes:

2020-01-08 114318.bin.exe

description	ioc	process
Key created	\REGISTRY\USER\S-1-5-21-1131729243-447456001-3632642222-1000\Software\Microsoft\Windows\CurrentVersion\Run	2020-01-08 114318.bin.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1131729243-447456001-3632642222-1000\Software\Microsoft\Windows\CurrentVersion\Run\driver = "C:\\Users\\Admin\\AppData\\Local\\Temp\\2020-01-08 114318.bin.exe"	2020-01-08 114318.bin.exe

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware

Data from Local System
T1005

Credentials in Files
T1081

C:\Users\Admin\AppData\Local\Temp\2020-01-08 114318.bin.exe
"C:\Users\Admin\AppData\Local\Temp\2020-01-08 114318.bin.exe"
1⤵
- Adds Run key to start application
PID:832

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

T1060

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Credentials in Files

T1081

Discovery

Lateral Movement

Collection

Data from Local System

T1005

Exfiltration

Command and Control

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix ATT&CK v6

Replay Monitor

Loading Replay Monitor...

Downloads