Overview

overview

7

Static

static

f56a39a041...58.exe

windows7_x64

7

f56a39a041...58.exe

windows10_x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f56a39a0417c779c0b48fa7b2638cc58.exe

  • Size

    753KB

  • Sample

    210327-cym5laf9ga

  • MD5

    f56a39a0417c779c0b48fa7b2638cc58

  • SHA1

    351ad6d8775a69d06498dbc6953f366f6c5e11fc

  • SHA256

    97e799becef44ad19659b81b1d8604ec6888304efc73bb105ed233096ad20045

  • SHA512

    06a94e843792ee261facc3560009eb4fb2f3bdd4e3af77a65d27703d9a7aa2f6b0df520fe8eb3f5a4b81ee2d53a01bfc5fc9f04f93967ec6f10fadc6c4080616

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      f56a39a0417c779c0b48fa7b2638cc58.exe

    • Size

      753KB

    • MD5

      f56a39a0417c779c0b48fa7b2638cc58

    • SHA1

      351ad6d8775a69d06498dbc6953f366f6c5e11fc

    • SHA256

      97e799becef44ad19659b81b1d8604ec6888304efc73bb105ed233096ad20045

    • SHA512

      06a94e843792ee261facc3560009eb4fb2f3bdd4e3af77a65d27703d9a7aa2f6b0df520fe8eb3f5a4b81ee2d53a01bfc5fc9f04f93967ec6f10fadc6c4080616

    Score
    7/10
    spywarestealer

    • Reads data files stored by FTP clients

      Tries to access configuration files associated with programs like FileZilla.

      spywarestealer

    • Reads local data of messenger clients

      Infostealers often target stored data of messaging applications, which can include saved credentials and account information.

      spywarestealer

    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

      spywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

4
T1081

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Data from Local System

4
T1005

Exfiltration

Command and Control

Impact

Tasks