Overview

overview

8

Static

static

fbeb7264d6...b9.exe

windows7_x64

8

fbeb7264d6...b9.exe

windows10-2004_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fbeb7264d65aa9e63c9ed027e16c570ad1930922aabcb2557932dadc68ef4eb9

  • Size

    15.2MB

  • Sample

    220516-p97gdscef6

  • MD5

    26ef6d0c4dc30e4597551f737f2b1929

  • SHA1

    0e8bdfd51684ea095394020b09b4bd539e3e4431

  • SHA256

    fbeb7264d65aa9e63c9ed027e16c570ad1930922aabcb2557932dadc68ef4eb9

  • SHA512

    6e1f622982564586dbb31860429020aa97b6d4c9c173d024ce20f7844818835215f32e723283e81024f115c67f4d76fa4e536b00c40d53b7ed05e772656014c6

Score
8/10
pyinstallerspywarestealer

Malware Config

Targets

    • Target

      fbeb7264d65aa9e63c9ed027e16c570ad1930922aabcb2557932dadc68ef4eb9

    • Size

      15.2MB

    • MD5

      26ef6d0c4dc30e4597551f737f2b1929

    • SHA1

      0e8bdfd51684ea095394020b09b4bd539e3e4431

    • SHA256

      fbeb7264d65aa9e63c9ed027e16c570ad1930922aabcb2557932dadc68ef4eb9

    • SHA512

      6e1f622982564586dbb31860429020aa97b6d4c9c173d024ce20f7844818835215f32e723283e81024f115c67f4d76fa4e536b00c40d53b7ed05e772656014c6

    Score
    8/10
    pyinstallerspywarestealer

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks