Overview

overview

7

Static

static

c5db6b4fa4...c7.exe

windows7-x64

7

c5db6b4fa4...c7.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c5db6b4fa4cc37e3b38f4cbd6e0ee98d1d41b7f98093cf575dbc2259b60f3ec7

  • Size

    847KB

  • Sample

    221124-c2k7zabg89

  • MD5

    ac10de18148cf893db362b340801139b

  • SHA1

    45887be5c4203466c2db5a45fc0646420739119f

  • SHA256

    c5db6b4fa4cc37e3b38f4cbd6e0ee98d1d41b7f98093cf575dbc2259b60f3ec7

  • SHA512

    9cb08e60ad587647c5928d269101d209c354af2432bb70f443f95583a4141e15909fd1aef5590b08a94192fd9b18cc72f9491c50d015621302694efa377e0da6

  • SSDEEP

    12288:jyUjD5wyUjD5SV5KV5izrqFkb7yUjD5wyUjD5SV5KV5izrqFkbrsAAh6NAt/BI/m:3IifqFuvIifqFuQqN/JWSVW7

Score
7/10
persistencespywarestealer

Malware Config

Targets

    • Target

      c5db6b4fa4cc37e3b38f4cbd6e0ee98d1d41b7f98093cf575dbc2259b60f3ec7

    • Size

      847KB

    • MD5

      ac10de18148cf893db362b340801139b

    • SHA1

      45887be5c4203466c2db5a45fc0646420739119f

    • SHA256

      c5db6b4fa4cc37e3b38f4cbd6e0ee98d1d41b7f98093cf575dbc2259b60f3ec7

    • SHA512

      9cb08e60ad587647c5928d269101d209c354af2432bb70f443f95583a4141e15909fd1aef5590b08a94192fd9b18cc72f9491c50d015621302694efa377e0da6

    • SSDEEP

      12288:jyUjD5wyUjD5SV5KV5izrqFkb7yUjD5wyUjD5SV5KV5izrqFkbrsAAh6NAt/BI/m:3IifqFuvIifqFuQqN/JWSVW7

    Score
    7/10
    persistencespywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks