Overview

overview

7

Static

static

b7cc131267...de.exe

windows7-x64

7

b7cc131267...de.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b7cc13126713c840f77a8f76126cbcd63eb4608a9e8f399b24ccf6457d29acde

  • Size

    452KB

  • Sample

    221123-qjdxtseb38

  • MD5

    2cdff617cf4a65ca38f5a061d7de2a1e

  • SHA1

    4a8c7e1ca413bbb8fc73535ee4c90b3fbdd5e40c

  • SHA256

    b7cc13126713c840f77a8f76126cbcd63eb4608a9e8f399b24ccf6457d29acde

  • SHA512

    1f17880fb6f337c9a5975eeacb2347bb434c2ece42e76712f0dd66df2d6c78a5935b29221e30bf93aea30564584a86aaa4f58b522dff4722e58b376b6f5847df

  • SSDEEP

    12288:PEdS1dZ9Ag3UWQ4V6xZyWLWSEXFmf/HP:PEOZ9AQsUWLWNXu

Score
7/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      b7cc13126713c840f77a8f76126cbcd63eb4608a9e8f399b24ccf6457d29acde

    • Size

      452KB

    • MD5

      2cdff617cf4a65ca38f5a061d7de2a1e

    • SHA1

      4a8c7e1ca413bbb8fc73535ee4c90b3fbdd5e40c

    • SHA256

      b7cc13126713c840f77a8f76126cbcd63eb4608a9e8f399b24ccf6457d29acde

    • SHA512

      1f17880fb6f337c9a5975eeacb2347bb434c2ece42e76712f0dd66df2d6c78a5935b29221e30bf93aea30564584a86aaa4f58b522dff4722e58b376b6f5847df

    • SSDEEP

      12288:PEdS1dZ9Ag3UWQ4V6xZyWLWSEXFmf/HP:PEOZ9AQsUWLWNXu

    Score
    7/10
    discoveryspywarestealer

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Reads data files stored by FTP clients

      Tries to access configuration files associated with programs like FileZilla.

      spywarestealer

    • Reads local data of messenger clients

      Infostealers often target stored data of messaging applications, which can include saved credentials and account information.

      spywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks