Overview

overview

8

Static

static

3

hit_36ce3d...c8.exe

windows7_x64

7

hit_36ce3d...c8.exe

windows10_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    hit_36ce3d1f270cc6e7eb2736de393422d624cc9f244e5a87a73386b216e72e98c8

  • Size

    14.6MB

  • Sample

    211115-sx6wwaafh4

  • MD5

    0913d6ba917bae527a0d0ae3c869a096

  • SHA1

    222e518afde5ee89259252a770d040d38fe566eb

  • SHA256

    36ce3d1f270cc6e7eb2736de393422d624cc9f244e5a87a73386b216e72e98c8

  • SHA512

    3bd842d0ce0a7c98645852216804195c174a231f89701446e50777739a5efd2c265a3c623620de6653d7ba2fa320efe7538cdb61a61b4b34f8516b9efd92ddb8

Score
8/10
pyinstallerransomwarespywarestealer

Malware Config

Targets

    • Target

      hit_36ce3d1f270cc6e7eb2736de393422d624cc9f244e5a87a73386b216e72e98c8

    • Size

      14.6MB

    • MD5

      0913d6ba917bae527a0d0ae3c869a096

    • SHA1

      222e518afde5ee89259252a770d040d38fe566eb

    • SHA256

      36ce3d1f270cc6e7eb2736de393422d624cc9f244e5a87a73386b216e72e98c8

    • SHA512

      3bd842d0ce0a7c98645852216804195c174a231f89701446e50777739a5efd2c265a3c623620de6653d7ba2fa320efe7538cdb61a61b4b34f8516b9efd92ddb8

    Score
    8/10
    ransomwarespywarestealer

    • Modifies extensions of user files

      Ransomware generally changes the extension on encrypted files.

      ransomware

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks