Overview

overview

10

Static

static

10

4cc88d5d86...ea.exe

windows7-x64

7

4cc88d5d86...ea.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4cc88d5d865cf9c417ab7b0cd32d11d9d7a35d4c80849e42c1ca35bacd5567ea

  • Size

    1.2MB

  • Sample

    221123-rp1jfshb94

  • MD5

    dcd51751f7a0ebada8e19cd863f44646

  • SHA1

    e22e825ce8c912b6b5c8e537141d1db3f437c51c

  • SHA256

    4cc88d5d865cf9c417ab7b0cd32d11d9d7a35d4c80849e42c1ca35bacd5567ea

  • SHA512

    5c915d3c36da50c60338681f33ea7a88fad71e8d7e2c36e77d79a5faac5007704bd450cec0b2f51faadc1e3dd727f7076ca424cfdce6ee2334ede8be5ea9c906

  • SSDEEP

    24576:8hX1/2MGli3IsmlbgjIfJlsYTgW7bTEy7y+ROr6gv1x3lluP6YhxGb:8hF/oi3Nmpgc8Y3TEiBO2qDAc

Score
10/10
spywarestealer

Malware Config

Targets

    • Target

      4cc88d5d865cf9c417ab7b0cd32d11d9d7a35d4c80849e42c1ca35bacd5567ea

    • Size

      1.2MB

    • MD5

      dcd51751f7a0ebada8e19cd863f44646

    • SHA1

      e22e825ce8c912b6b5c8e537141d1db3f437c51c

    • SHA256

      4cc88d5d865cf9c417ab7b0cd32d11d9d7a35d4c80849e42c1ca35bacd5567ea

    • SHA512

      5c915d3c36da50c60338681f33ea7a88fad71e8d7e2c36e77d79a5faac5007704bd450cec0b2f51faadc1e3dd727f7076ca424cfdce6ee2334ede8be5ea9c906

    • SSDEEP

      24576:8hX1/2MGli3IsmlbgjIfJlsYTgW7bTEy7y+ROr6gv1x3lluP6YhxGb:8hF/oi3Nmpgc8Y3TEiBO2qDAc

    Score
    7/10
    spywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks