Overview

overview

8

Static

static

01afeb1fb7...57.exe

windows7_x64

8

01afeb1fb7...57.exe

windows10_x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    01afeb1fb72315185dd1e0ffed382857.exe
  • Size 493KB
  • Sample210724-9vej7ksfta
  • SHA256 0fa70b582aa0b10107a3fdfd5e70a6e9c225ac0db07c9787c745d2ebfc75fb5d
  • MD5 SHA1 SHA512
Score
8/10
discoveryspywarestealer

Malware Config

Targets

    • Target
      01afeb1fb72315185dd1e0ffed382857.exe
    • Size 493KB
    • SHA256 0fa70b582aa0b10107a3fdfd5e70a6e9c225ac0db07c9787c745d2ebfc75fb5d
    • MD5 SHA1 SHA512
    Score
    8/10
    discoveryspywarestealer

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

      spywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks