Overview

overview

7

Static

static

e9c4d35052...4d.exe

windows7-x64

7

e9c4d35052...4d.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    e9c4d35052b4e5ba4e1cdbb468bd1961cce756cc9c6f39c2da88d6a8038aec4d

  • Size

    2.1MB

  • Sample

    221107-kx7t6sghe9

  • MD5

    ab84ac502d793c9166768163f97cce79

  • SHA1

    bf093a27f8a23bfcd6a6b074a44fdcbebe71d561

  • SHA256

    e9c4d35052b4e5ba4e1cdbb468bd1961cce756cc9c6f39c2da88d6a8038aec4d

  • SHA512

    cde34b452eb01621dde43913b36305c672fdbaadd6676894c88219f8d373231ad191bb8a028457b63e6c2f063257197f0e956f9c983b1c8193722fd60321875a

  • SSDEEP

    49152:x5lVZG/4MnYYJ2ZhurRokpmcHiLHkJE8c9IW1dXgfC/MHmg:3rZDkrRokiDYc9IW1dXgfC/MHmg

Score
7/10
persistencespywarestealer

Malware Config

Targets

    • Target

      e9c4d35052b4e5ba4e1cdbb468bd1961cce756cc9c6f39c2da88d6a8038aec4d

    • Size

      2.1MB

    • MD5

      ab84ac502d793c9166768163f97cce79

    • SHA1

      bf093a27f8a23bfcd6a6b074a44fdcbebe71d561

    • SHA256

      e9c4d35052b4e5ba4e1cdbb468bd1961cce756cc9c6f39c2da88d6a8038aec4d

    • SHA512

      cde34b452eb01621dde43913b36305c672fdbaadd6676894c88219f8d373231ad191bb8a028457b63e6c2f063257197f0e956f9c983b1c8193722fd60321875a

    • SSDEEP

      49152:x5lVZG/4MnYYJ2ZhurRokpmcHiLHkJE8c9IW1dXgfC/MHmg:3rZDkrRokiDYc9IW1dXgfC/MHmg

    Score
    7/10
    persistencespywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks