Overview

overview

10

Static

static

95d8491c3c...00.exe

windows7_x64

1

95d8491c3c...00.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    95d8491c3c3373ebea7ce7377c9f370282bc6a5241bdb4ebab524b39e49d6c00

  • Size

    7.9MB

  • Sample

    220414-n8y8yschhn

  • MD5

    66eeed112f302db2ee39e58cf6eb0c2e

  • SHA1

    7f614ccb6d175a343be4e9d18787f723e4a25e76

  • SHA256

    95d8491c3c3373ebea7ce7377c9f370282bc6a5241bdb4ebab524b39e49d6c00

  • SHA512

    2009a6e680d208759cccef72ab3000e232eb323befe6217960eba42b53765e7df2833be36bd8a6fd0dd33c54624d49a8a1f49ad73f27ec8a92924b5bb43d7280

Score
10/10
metastealerdiscoverystealer

Malware Config

Targets

    • Target

      95d8491c3c3373ebea7ce7377c9f370282bc6a5241bdb4ebab524b39e49d6c00

    • Size

      7.9MB

    • MD5

      66eeed112f302db2ee39e58cf6eb0c2e

    • SHA1

      7f614ccb6d175a343be4e9d18787f723e4a25e76

    • SHA256

      95d8491c3c3373ebea7ce7377c9f370282bc6a5241bdb4ebab524b39e49d6c00

    • SHA512

      2009a6e680d208759cccef72ab3000e232eb323befe6217960eba42b53765e7df2833be36bd8a6fd0dd33c54624d49a8a1f49ad73f27ec8a92924b5bb43d7280

    Score
    10/10
    metastealerdiscoverystealer

    • Meta Stealer Stealer

      Meta Stealer steals passwords stored in browsers, written in C++.

      stealermetastealer

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks