Overview

overview

8

Static

static

dab664757e...85.exe

windows7-x64

8

dab664757e...85.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    dab664757e4d5fda2b75af03132214a6d21b9f1c638aac7ab185df480b936585

  • Size

    107KB

  • Sample

    221003-qmctyahahj

  • MD5

    595a540d3c9f8baafd6db2c8dba05d30

  • SHA1

    cd6c28a5c1ad6d21aad89aeb49d2a35381615d3b

  • SHA256

    dab664757e4d5fda2b75af03132214a6d21b9f1c638aac7ab185df480b936585

  • SHA512

    d53f33e6f1893e228e9f14ecd739c95a06ba90dfcf8fbad95444769c1e348c9154b87fa10f6c840a069149c9044d9d9af56a39bdf459fe997391f01de7b83721

  • SSDEEP

    1536:4QweHj06eCe5rkQIIVmzgrZx/Ef7f6S95VbHHFrbDuPCSeHjxJj7xG6xoyNGx:vj0og0ML/Ef7f6+RbaDeHjxJvxGeXGx

Score
8/10
evasionpersistencespywarestealer

Malware Config

Targets

    • Target

      dab664757e4d5fda2b75af03132214a6d21b9f1c638aac7ab185df480b936585

    • Size

      107KB

    • MD5

      595a540d3c9f8baafd6db2c8dba05d30

    • SHA1

      cd6c28a5c1ad6d21aad89aeb49d2a35381615d3b

    • SHA256

      dab664757e4d5fda2b75af03132214a6d21b9f1c638aac7ab185df480b936585

    • SHA512

      d53f33e6f1893e228e9f14ecd739c95a06ba90dfcf8fbad95444769c1e348c9154b87fa10f6c840a069149c9044d9d9af56a39bdf459fe997391f01de7b83721

    • SSDEEP

      1536:4QweHj06eCe5rkQIIVmzgrZx/Ef7f6S95VbHHFrbDuPCSeHjxJj7xG6xoyNGx:vj0og0ML/Ef7f6+RbaDeHjxJvxGeXGx

    Score
    8/10
    evasionpersistencespywarestealer

    • Executes dropped EXE

    • Modifies Windows Firewall

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks