metastealer | 02151539f5f9f89a9021ea2914bb520772ae1c8deb938b0646c4a319367e4744 | Triage

Sharing

General

Target

02151539f5f9f89a9021ea2914bb520772ae1c8deb938b0646c4a319367e4744
Size

96KB
Sample

220415-f5412aafh3
MD5

b85e836c181e4b209d56c0d2df72d53e
SHA1

e3bf80c50892d44db8391f00b3329863a9d19993
SHA256

02151539f5f9f89a9021ea2914bb520772ae1c8deb938b0646c4a319367e4744
SHA512

0b767f55b1033e1340c0a98c0a880bdac102f6de79520cc868c357c1d0e54de70f76798398d16167dfed8594a83ff012050cfc57aa9c63f1343f9d12160220bb

Score

10^/10

metastealer discovery evasion stealer trojan

Malware Config

Targets

- Target
  
  02151539f5f9f89a9021ea2914bb520772ae1c8deb938b0646c4a319367e4744
- Size
  
  96KB
- MD5
  
  b85e836c181e4b209d56c0d2df72d53e
- SHA1
  
  e3bf80c50892d44db8391f00b3329863a9d19993
- SHA256
  
  02151539f5f9f89a9021ea2914bb520772ae1c8deb938b0646c4a319367e4744
- SHA512
  
  0b767f55b1033e1340c0a98c0a880bdac102f6de79520cc868c357c1d0e54de70f76798398d16167dfed8594a83ff012050cfc57aa9c63f1343f9d12160220bb
Score

10^/10

discovery evasion trojan metastealer stealer
- Meta Stealer Stealer
  Meta Stealer steals passwords stored in browsers, written in C++.
  stealer metastealer
- Executes dropped EXE
- Windows security modification
  evasion trojan
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  evasion trojan
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasiontrojan

behavioral2

metastealerevasionstealertrojan