Overview

overview

7

Static

static

e73b47c344...1e.exe

windows7-x64

7

e73b47c344...1e.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e73b47c344e0e0e20559aec7181764e1efd793d62ea5934235f436c999146b1e

  • Size

    1.6MB

  • Sample

    221123-p2pavacg97

  • MD5

    6bcb0c0c6f32309054fc3d4ce0bae3c7

  • SHA1

    261c33072f9e2f8d87591b09f606f467656d49e5

  • SHA256

    e73b47c344e0e0e20559aec7181764e1efd793d62ea5934235f436c999146b1e

  • SHA512

    07fe28a183a2bf9faf09a0f550a4d7aa7f689ac3905fa94ef961849362feb6c65fac298fdcf3f59d3e7f585fa98d823230f07a15ff7a2d7a821556dc7e53c867

  • SSDEEP

    24576:J3Kxpq7FXyYZ3j4MO6l0eKYtiLXftzcNbOKX5+QInQphrvgpl2vRR7rC7T96ZoG+:p7Np8MO6wLG4Sgb2vRRUT9uo5

Score
7/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      e73b47c344e0e0e20559aec7181764e1efd793d62ea5934235f436c999146b1e

    • Size

      1.6MB

    • MD5

      6bcb0c0c6f32309054fc3d4ce0bae3c7

    • SHA1

      261c33072f9e2f8d87591b09f606f467656d49e5

    • SHA256

      e73b47c344e0e0e20559aec7181764e1efd793d62ea5934235f436c999146b1e

    • SHA512

      07fe28a183a2bf9faf09a0f550a4d7aa7f689ac3905fa94ef961849362feb6c65fac298fdcf3f59d3e7f585fa98d823230f07a15ff7a2d7a821556dc7e53c867

    • SSDEEP

      24576:J3Kxpq7FXyYZ3j4MO6l0eKYtiLXftzcNbOKX5+QInQphrvgpl2vRR7rC7T96ZoG+:p7Np8MO6wLG4Sgb2vRRUT9uo5

    Score
    7/10
    discoveryspywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks