Overview

overview

7

Static

static

7

313d3ee813...e1.exe

windows7-x64

1

313d3ee813...e1.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    313d3ee813483b7de07a2988f5d3bfb939537645d8a129619457ba63bd5841e1

  • Size

    1.9MB

  • Sample

    221028-2yf7aaahc3

  • MD5

    d39b67fa058db0ca6ed73b49c37c0a80

  • SHA1

    1ca6d6b8142a93664da1649dcb54af176d189e7c

  • SHA256

    313d3ee813483b7de07a2988f5d3bfb939537645d8a129619457ba63bd5841e1

  • SHA512

    4c09d17e72d48c71c790dbbad356c07bfe21fe964bca31ad25b1bd4342012fa8c828a7134edefbd580f2513404e57b72e0ea3245fc70755f82301d45111b3394

  • SSDEEP

    24576:jIpU+S1Rb0PzdLdJsBKdq5bAzI+C5WYQI6w1ZCjwAlY/PE4:yNdnQKA5b+IJ1ZCjwA

Score
7/10
agilenetspywarestealer

Malware Config

Targets

    • Target

      313d3ee813483b7de07a2988f5d3bfb939537645d8a129619457ba63bd5841e1

    • Size

      1.9MB

    • MD5

      d39b67fa058db0ca6ed73b49c37c0a80

    • SHA1

      1ca6d6b8142a93664da1649dcb54af176d189e7c

    • SHA256

      313d3ee813483b7de07a2988f5d3bfb939537645d8a129619457ba63bd5841e1

    • SHA512

      4c09d17e72d48c71c790dbbad356c07bfe21fe964bca31ad25b1bd4342012fa8c828a7134edefbd580f2513404e57b72e0ea3245fc70755f82301d45111b3394

    • SSDEEP

      24576:jIpU+S1Rb0PzdLdJsBKdq5bAzI+C5WYQI6w1ZCjwAlY/PE4:yNdnQKA5b+IJ1ZCjwA

    Score
    7/10
    spywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks