Overview

overview

8

Static

static

4cd0348c4c...78.exe

windows7-x64

3

4cd0348c4c...78.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4cd0348c4c23253f592ec6c6eb763cf531ab6f7f647089842d3d3b467492b978

  • Size

    149KB

  • Sample

    220919-ry4x8sghhj

  • MD5

    2a812e6a820cf6e5d0c1d9fc91960f20

  • SHA1

    7c6dbd6c940ea237354b59ee958e18363c2e7374

  • SHA256

    4cd0348c4c23253f592ec6c6eb763cf531ab6f7f647089842d3d3b467492b978

  • SHA512

    28b7a1ef166dd55c5ba9da66e07791d739bf1f6dd2cb5a27e5920e0a5857a0e315e48ea512ae8c8de6a8fc172b2395f69e1ff9c56e399b11f9efdfa383e92ecf

  • SSDEEP

    3072:1JMGaWXa0+9na0FF53uywafvR6rEy4u1HWWsxayVB9:v7bXZ+9a0FFcPa3R6riu1HWWsoIB9

Score
8/10
persistencespywarestealer

Malware Config

Targets

    • Target

      4cd0348c4c23253f592ec6c6eb763cf531ab6f7f647089842d3d3b467492b978

    • Size

      149KB

    • MD5

      2a812e6a820cf6e5d0c1d9fc91960f20

    • SHA1

      7c6dbd6c940ea237354b59ee958e18363c2e7374

    • SHA256

      4cd0348c4c23253f592ec6c6eb763cf531ab6f7f647089842d3d3b467492b978

    • SHA512

      28b7a1ef166dd55c5ba9da66e07791d739bf1f6dd2cb5a27e5920e0a5857a0e315e48ea512ae8c8de6a8fc172b2395f69e1ff9c56e399b11f9efdfa383e92ecf

    • SSDEEP

      3072:1JMGaWXa0+9na0FF53uywafvR6rEy4u1HWWsxayVB9:v7bXZ+9a0FFcPa3R6riu1HWWsoIB9

    Score
    8/10
    persistencespywarestealer

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks