Overview

overview

8

Static

static

CFDI sat.mx.cmd

windows7-x64

8

CFDI sat.mx.cmd

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    CFDI sat.mx.cmd

  • Size

    1.6MB

  • Sample

    221027-t6q3fschdr

  • MD5

    5d510d0ab982f934afabd402219db19c

  • SHA1

    f6ae8ecb42f5bdc0a54c2dc8392049580f3085d5

  • SHA256

    56d7c75bb3d775e948c10dfa3fd83d9b1a08dcd73147bb2ff67341176cd3c6e4

  • SHA512

    bec68e72a70e5bdf129667621670a15a1a55d13190807cc6514babc51315225bc40ceed334eaff7e8a5bb4a41b8209d653f2dd0d487dc673b51e404bb96d7d57

  • SSDEEP

    24576:EotxQMlJva9Ya7MLkx7dWpAECJvaz35lCK1CjMzGbfJFQ9w9DI5Jb5ruQ3duLD:xQCiTldNtad10bQFhcLD

Score
8/10
collectionspywarestealer

Malware Config

Targets

    • Target

      CFDI sat.mx.cmd

    • Size

      1.6MB

    • MD5

      5d510d0ab982f934afabd402219db19c

    • SHA1

      f6ae8ecb42f5bdc0a54c2dc8392049580f3085d5

    • SHA256

      56d7c75bb3d775e948c10dfa3fd83d9b1a08dcd73147bb2ff67341176cd3c6e4

    • SHA512

      bec68e72a70e5bdf129667621670a15a1a55d13190807cc6514babc51315225bc40ceed334eaff7e8a5bb4a41b8209d653f2dd0d487dc673b51e404bb96d7d57

    • SSDEEP

      24576:EotxQMlJva9Ya7MLkx7dWpAECJvaz35lCK1CjMzGbfJFQ9w9DI5Jb5ruQ3duLD:xQCiTldNtad10bQFhcLD

    Score
    8/10
    collectionspywarestealer

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses Microsoft Outlook profiles

      collection
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks