Overview

overview

8

Static

static

440855f9a7...ba.exe

windows7-x64

8

440855f9a7...ba.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    440855f9a7951a49d1434beee6183034d2ee15d569bd016591a4bd0f2a2f7bba

  • Size

    169KB

  • Sample

    221124-asbk3aad6v

  • MD5

    027df46b9411263717ef91b5e8608820

  • SHA1

    bdafedaed9c6ab83ec739f98bf638e80b555294a

  • SHA256

    440855f9a7951a49d1434beee6183034d2ee15d569bd016591a4bd0f2a2f7bba

  • SHA512

    82f2d347b0b1129f15749e05abd83604a231f35aef288c42b8fd15a12b28c9c36c024346b4bcc0b6fc0a63e59dbca56644e722b1910616ab920fe27142d8ef73

  • SSDEEP

    3072:IVe+aX3zveyNIxq/iVo/MfafRUwFYC5TBf/2Fa9Y3zQOwNnYcVBPPy6t:5+aX3LVOx7Vo/Ms5TB6MCzQOwNnYcHKc

Score
8/10
spywarestealer

Malware Config

Targets

    • Target

      440855f9a7951a49d1434beee6183034d2ee15d569bd016591a4bd0f2a2f7bba

    • Size

      169KB

    • MD5

      027df46b9411263717ef91b5e8608820

    • SHA1

      bdafedaed9c6ab83ec739f98bf638e80b555294a

    • SHA256

      440855f9a7951a49d1434beee6183034d2ee15d569bd016591a4bd0f2a2f7bba

    • SHA512

      82f2d347b0b1129f15749e05abd83604a231f35aef288c42b8fd15a12b28c9c36c024346b4bcc0b6fc0a63e59dbca56644e722b1910616ab920fe27142d8ef73

    • SSDEEP

      3072:IVe+aX3zveyNIxq/iVo/MfafRUwFYC5TBf/2Fa9Y3zQOwNnYcVBPPy6t:5+aX3LVOx7Vo/Ms5TB6MCzQOwNnYcHKc

    Score
    8/10
    spywarestealer

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks