Overview

overview

8

Static

static

Spells_and...ts.exe

windows10-1703-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Spells_and_Secrets.exe

  • Size

    58.7MB

  • Sample

    220918-vpxz4sfdfl

  • MD5

    b18fba589ca46253ae0ed8d0347a971b

  • SHA1

    2ada894dd03e1ed845a9325ac56f64b880b4baef

  • SHA256

    a24b94f0c8155ac398004b57736f7eb75f7090af292f575c0fcd84ce6feed127

  • SHA512

    1baf53f830fa9cdc9b13106d83616c44418dfc36c99437ac16b87d2a0fba5a5d2fb9c77f090edab9cd45fb67b63995a4b8e30042ef34408d9c7e8fe4da9d303c

  • SSDEEP

    1572864:k4/4rzOchPVfrTRR4BPmz6CXRWLUhAgur5eAeMBJ7:vkqcdSB+z6sWAKrMA37

Score
8/10
spywarestealer

Malware Config

Targets

    • Target

      Spells_and_Secrets.exe

    • Size

      58.7MB

    • MD5

      b18fba589ca46253ae0ed8d0347a971b

    • SHA1

      2ada894dd03e1ed845a9325ac56f64b880b4baef

    • SHA256

      a24b94f0c8155ac398004b57736f7eb75f7090af292f575c0fcd84ce6feed127

    • SHA512

      1baf53f830fa9cdc9b13106d83616c44418dfc36c99437ac16b87d2a0fba5a5d2fb9c77f090edab9cd45fb67b63995a4b8e30042ef34408d9c7e8fe4da9d303c

    • SSDEEP

      1572864:k4/4rzOchPVfrTRR4BPmz6CXRWLUhAgur5eAeMBJ7:vkqcdSB+z6sWAKrMA37

    Score
    8/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1

MITRE ATT&CK Enterprise v6

Tasks