Overview

overview

10

Static

static

28df5c75a2...fa.exe

windows7_x64

10

28df5c75a2...fa.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    28df5c75a2f78120ff96d4a72a3c23cee97c9b46c96410cf591af38cb4aed0fa.bin

  • Size

    364KB

  • Sample

    220610-pp9q1sfdf9

  • MD5

    cc7207f09a6fe41c71626ad4d3f127ce

  • SHA1

    84e749c37978f9387e16fab29c7b1b291be93a63

  • SHA256

    28df5c75a2f78120ff96d4a72a3c23cee97c9b46c96410cf591af38cb4aed0fa

  • SHA512

    c7f236f1bafa9192ba30f40b6cbc0e74c89a5b4d7ae95fa98d1ace3857849ba37d2211a2c42bb4f348bd218e1ce28a7006bbda07e3e1e51c09a806da17f9f655

Score
10/10
windealerstealersuricatatrojan

Malware Config

Targets

    • Target

      28df5c75a2f78120ff96d4a72a3c23cee97c9b46c96410cf591af38cb4aed0fa.bin

    • Size

      364KB

    • MD5

      cc7207f09a6fe41c71626ad4d3f127ce

    • SHA1

      84e749c37978f9387e16fab29c7b1b291be93a63

    • SHA256

      28df5c75a2f78120ff96d4a72a3c23cee97c9b46c96410cf591af38cb4aed0fa

    • SHA512

      c7f236f1bafa9192ba30f40b6cbc0e74c89a5b4d7ae95fa98d1ace3857849ba37d2211a2c42bb4f348bd218e1ce28a7006bbda07e3e1e51c09a806da17f9f655

    Score
    10/10
    windealerstealersuricatatrojan

    • Detect WinDealer information stealer

      stealer

    • WinDealer

      WinDealer is an info stealer used by LuoYu group.

      stealertrojanwindealer

    • suricata: ET MALWARE Win32/WinDealer CnC Activity (Checkin)

      suricata: ET MALWARE Win32/WinDealer CnC Activity (Checkin)

      suricata
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks