Overview

overview

9

Static

static

9

ad286a9ef6...88.dll

windows7_x64

8

ad286a9ef6...88.dll

windows10-2004_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ad286a9ef63c68763548711b695d7882ad520544be58b0f6c518591ce96bfe88

  • Size

    499KB

  • Sample

    220523-zgj6haahbm

  • MD5

    78e9678410027e275631ccc725c30904

  • SHA1

    29b43321cc43a815a0bd8f253e446198875dea3f

  • SHA256

    ad286a9ef63c68763548711b695d7882ad520544be58b0f6c518591ce96bfe88

  • SHA512

    7aaf15af07888dcced8d34a8cc73df1e6de36e78fc89bbcc4405bca4d9f3768797764d35458514901eeb0caec601ef79f160a6b12693999ba70492bcf232c948

Score
9/10
collectioncryptonepackerspywarestealer

Malware Config

Targets

    • Target

      ad286a9ef63c68763548711b695d7882ad520544be58b0f6c518591ce96bfe88

    • Size

      499KB

    • MD5

      78e9678410027e275631ccc725c30904

    • SHA1

      29b43321cc43a815a0bd8f253e446198875dea3f

    • SHA256

      ad286a9ef63c68763548711b695d7882ad520544be58b0f6c518591ce96bfe88

    • SHA512

      7aaf15af07888dcced8d34a8cc73df1e6de36e78fc89bbcc4405bca4d9f3768797764d35458514901eeb0caec601ef79f160a6b12693999ba70492bcf232c948

    Score
    8/10
    collectionspywarestealer

    • Blocklisted process makes network request

    • Reads local data of messenger clients

      Infostealers often target stored data of messaging applications, which can include saved credentials and account information.

      spywarestealer

    • Accesses Microsoft Outlook profiles

      collection
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Lateral Movement

Collection

Data from Local System

1
T1005

Email Collection

1
T1114

Exfiltration

Command and Control

Impact

Tasks