Overview

overview

7

Static

static

879ec1d9ee...78.exe

windows7-x64

7

879ec1d9ee...78.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    879ec1d9eebff824a986e3309880d3a5146ff55a1b856dbfb5fad8bf02c22178

  • Size

    1.6MB

  • Sample

    221123-q2t2rsae4x

  • MD5

    249c38ecb4728c688e9b75359cc41508

  • SHA1

    7aab1d5c31f4a2b80c4798c40ddbd215cfb37634

  • SHA256

    879ec1d9eebff824a986e3309880d3a5146ff55a1b856dbfb5fad8bf02c22178

  • SHA512

    28f8a3d339a0211ffc4675b6b441ce6b79eca6aebb95f7bb1a69a9d90ec50374125e0e4e0f128cbaca82e52af82a2ad80ef4cfdb7bbf0c00ee5e60593df37f7a

  • SSDEEP

    24576:uIqR5vrjhyv53DHGo2Hfi73PdD+vozKnFPqVICtwiU3bsl2GlF7r/naGWj4WXBQB:2rlo3z2EVoLm7jaGWj4Z

Score
7/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      879ec1d9eebff824a986e3309880d3a5146ff55a1b856dbfb5fad8bf02c22178

    • Size

      1.6MB

    • MD5

      249c38ecb4728c688e9b75359cc41508

    • SHA1

      7aab1d5c31f4a2b80c4798c40ddbd215cfb37634

    • SHA256

      879ec1d9eebff824a986e3309880d3a5146ff55a1b856dbfb5fad8bf02c22178

    • SHA512

      28f8a3d339a0211ffc4675b6b441ce6b79eca6aebb95f7bb1a69a9d90ec50374125e0e4e0f128cbaca82e52af82a2ad80ef4cfdb7bbf0c00ee5e60593df37f7a

    • SSDEEP

      24576:uIqR5vrjhyv53DHGo2Hfi73PdD+vozKnFPqVICtwiU3bsl2GlF7r/naGWj4WXBQB:2rlo3z2EVoLm7jaGWj4Z

    Score
    7/10
    discoveryspywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks