Overview

overview

7

Static

static

15877d60d7...85.exe

windows7_x64

7

15877d60d7...85.exe

windows10_x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    15877d60d725b49ea79fb8f0341a2b70c795192eba709d0c60b8288394903d85

  • Size

    235KB

  • Sample

    201108-n4dshwzrse

  • MD5

    897385950aad28169556fb8d37b06773

  • SHA1

    3044fd2031c822289cae1cb69ab7bd2efc174d44

  • SHA256

    15877d60d725b49ea79fb8f0341a2b70c795192eba709d0c60b8288394903d85

  • SHA512

    835c0612165d4a10348e24cfbbf5d111058fa73c6c112729c6a9e638f5c9d674e4dddac7c1b68e983182ba213c5eb4bbbae98efb90efe901cce4c597b14dcc4c

Score
7/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      15877d60d725b49ea79fb8f0341a2b70c795192eba709d0c60b8288394903d85

    • Size

      235KB

    • MD5

      897385950aad28169556fb8d37b06773

    • SHA1

      3044fd2031c822289cae1cb69ab7bd2efc174d44

    • SHA256

      15877d60d725b49ea79fb8f0341a2b70c795192eba709d0c60b8288394903d85

    • SHA512

      835c0612165d4a10348e24cfbbf5d111058fa73c6c112729c6a9e638f5c9d674e4dddac7c1b68e983182ba213c5eb4bbbae98efb90efe901cce4c597b14dcc4c

    Score
    7/10
    discoveryspywarestealer

    • Deletes itself

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spyware

    • Accesses 2FA software files, possible credential harvesting

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

2
T1081

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

2
T1005

Exfiltration

Command and Control

Impact

Tasks