Overview

overview

7

Static

static

931fdd5519...22.exe

windows7_x64

7

931fdd5519...22.exe

windows10_x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    931fdd551975cf30ae02f85a90c5ee22

  • Size

    215KB

  • Sample

    201117-8rw338ke9j

  • MD5

    38af588745580e1c5d31d35ec5ec6dd5

  • SHA1

    c4884077dda14fb1ee442c39f31cbc1a505651ac

  • SHA256

    a83fcb8454befab866f2ab18871017730bcfc3f690106844f740ebbd8cadd6d8

  • SHA512

    04fcd7ee46fe1b8bbf238c23f40a1062bd79bc45178c7efdbc487a33b6896059cd7cd750ab86ff9c15da3f21b0736e4ff98a32006894ec30e47e33ddb87b0e9c

Score
7/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      931fdd551975cf30ae02f85a90c5ee22

    • Size

      215KB

    • MD5

      38af588745580e1c5d31d35ec5ec6dd5

    • SHA1

      c4884077dda14fb1ee442c39f31cbc1a505651ac

    • SHA256

      a83fcb8454befab866f2ab18871017730bcfc3f690106844f740ebbd8cadd6d8

    • SHA512

      04fcd7ee46fe1b8bbf238c23f40a1062bd79bc45178c7efdbc487a33b6896059cd7cd750ab86ff9c15da3f21b0736e4ff98a32006894ec30e47e33ddb87b0e9c

    Score
    7/10
    discoveryspywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spyware

    • Accesses 2FA software files, possible credential harvesting

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Credentials in Files

2
T1081

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

2
T1005

Exfiltration

Command and Control

Impact

Tasks