Overview

overview

7

Static

static

ad4483050a...52.exe

windows7-x64

7

ad4483050a...52.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ad4483050a52e29f283dab4a5bb011bdc56944be87090c43e92348967f7c9e52

  • Size

    930KB

  • Sample

    221124-bevmfsgh25

  • MD5

    2587361063e1b8f928f9011242f7ae70

  • SHA1

    e775eebc421666e802d49cb35603576f207a556b

  • SHA256

    ad4483050a52e29f283dab4a5bb011bdc56944be87090c43e92348967f7c9e52

  • SHA512

    d761332d81660a8e7aeaf8d99ff4fd1b5ac298499c208d2ddbc75d561479d1ba6c6073cf72ed8012fe6096526944e51a0cc1b64de11adf7c4aef413cf30c4005

  • SSDEEP

    24576:2W/bl/Ddphp9ZwgzOf+jkCazpmHhDzIo1L0:z/pLrIgzoQkpmBPLZ0

Score
7/10
persistencespywarestealer

Malware Config

Targets

    • Target

      ad4483050a52e29f283dab4a5bb011bdc56944be87090c43e92348967f7c9e52

    • Size

      930KB

    • MD5

      2587361063e1b8f928f9011242f7ae70

    • SHA1

      e775eebc421666e802d49cb35603576f207a556b

    • SHA256

      ad4483050a52e29f283dab4a5bb011bdc56944be87090c43e92348967f7c9e52

    • SHA512

      d761332d81660a8e7aeaf8d99ff4fd1b5ac298499c208d2ddbc75d561479d1ba6c6073cf72ed8012fe6096526944e51a0cc1b64de11adf7c4aef413cf30c4005

    • SSDEEP

      24576:2W/bl/Ddphp9ZwgzOf+jkCazpmHhDzIo1L0:z/pLrIgzoQkpmBPLZ0

    Score
    7/10
    persistencespywarestealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks