Overview

overview

7

Static

static

e7df983f4b...5c.exe

windows7-x64

7

e7df983f4b...5c.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    e7df983f4b7ad754aa2e6a31918436cf4b0556725acb323d5885dee7d689595c.zip

  • Size

    121KB

  • Sample

    220910-l7szfadfap

  • MD5

    37933cb744812b86555a9d6ebf8abf52

  • SHA1

    75d532d65fb091636d23ec1c4e115780bd259217

  • SHA256

    c85bf14904d95797c72993f9e1d3e991e18c1e783a39b9d4e868de409da06a21

  • SHA512

    477026e48a47859f8cd1c1e450916c2334e6c90e45cb5af17b460b597a061bbef068a12420f4ccc43e6f2166f19e85027730e93aee6a10cb166920f8cf6309f0

  • SSDEEP

    3072:VImaTzd1IJJODgPrPZpoAW67pmZ/iZi1D6uJ:La11gODgDZpBIZaYB5J

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      e7df983f4b7ad754aa2e6a31918436cf4b0556725acb323d5885dee7d689595c

    • Size

      304KB

    • MD5

      d711efbe005d32968a536a931f44bec4

    • SHA1

      f88700ccf2a06c56ea2937fd93d8a3d3e6e33d5f

    • SHA256

      e7df983f4b7ad754aa2e6a31918436cf4b0556725acb323d5885dee7d689595c

    • SHA512

      0ca3334a2e5238701b67f6d6b38e5084d1a4518a9ffe4e6f1ceffd70c4aa2430db0e94df597c8bbeee1715b0d86f3d13d976384c080c968e3ee5b277d3bab092

    • SSDEEP

      6144:IZuPzZzFe5bONNVJ+h6vHa+IiZpCO7WhRB1yD+r78UOa:I4Zab4NfHHJIQybB1ycH

    Score
    7/10
    spywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks