Overview

overview

8

Static

static

425945a93b...le.exe

windows7_x64

8

425945a93b...le.exe

windows10_x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    425945a93beb160f101d51de36363d1e7ebc45279987c3eaf5e7f183ed0a3776.sample

  • Size

    504KB

  • Sample

    210726-gct49k81x6

  • MD5

    4252a2aba65926b3c5888549cebae854

  • SHA1

    c54de418497df713b513437c290a7344c1169b13

  • SHA256

    425945a93beb160f101d51de36363d1e7ebc45279987c3eaf5e7f183ed0a3776

  • SHA512

    159c67524218a85963b0f3c25d6543d32b46858a1fd018b1105324aff5ccc991d6effaade9662595ddfa6dfee5ab7f7258a0db7609eaa5ee3399a21c59404eb9

Score
8/10
ransomwarespywarestealer

Malware Config

Targets

    • Target

      425945a93beb160f101d51de36363d1e7ebc45279987c3eaf5e7f183ed0a3776.sample

    • Size

      504KB

    • MD5

      4252a2aba65926b3c5888549cebae854

    • SHA1

      c54de418497df713b513437c290a7344c1169b13

    • SHA256

      425945a93beb160f101d51de36363d1e7ebc45279987c3eaf5e7f183ed0a3776

    • SHA512

      159c67524218a85963b0f3c25d6543d32b46858a1fd018b1105324aff5ccc991d6effaade9662595ddfa6dfee5ab7f7258a0db7609eaa5ee3399a21c59404eb9

    Score
    8/10
    ransomwarespywarestealer

    • Modifies extensions of user files

      Ransomware generally changes the extension on encrypted files.

      ransomware

    • Deletes itself

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Credentials in Files

1
T1081

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks