Overview

overview

8

Static

static

Myou.dll

windows7_x64

1

Myou.dll

windows10_x64

1

csrts.exe

windows7_x64

8

csrts.exe

windows10_x64

8

Resubmissions

18/02/2022, 07:34

220218-jea7tadbcq8

18/02/2022, 07:13

220218-h2b7yschgj8

Sharing

Copy URL Twitter E-mail

General

  • Target
    Sample(s).rar
  • Size 336KB
  • Sample220218-h2b7yschgj
  • SHA256 c6079f689a8a692799e84ae1fbb1341d1ee5519e89cc5a622f315da8e651abeb
  • MD5 SHA1 SHA512
Score
8/10
spywarestealer

Malware Config

Targets

    • Target
      Myou.dll
    • Size 30KB
    • SHA256 467e0dce7deac627f86ce46aa0ec23b0265da45dc85564a71cf10bf676f84a6f
    • MD5 SHA1 SHA512
    Score
    1/10
    behavioral1behavioral2
    • Target
      csrts.exe
    • Size 498KB
    • SHA256 3dca9bd1af28bbf348c0562475edd60de2b5a2424e586eaf118909b013054eee
    • MD5 SHA1 SHA512
    Score
    8/10
    spywarestealer

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops desktop.ini file(s)

    behavioral3behavioral4

MITRE ATT&CK Enterprise v6

Tasks