Overview

overview

8

Static

static

7d0a638d6c...84.exe

windows7-x64

8

7d0a638d6c...84.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7d0a638d6c0a3766756f99265ecdd65b8a4677caf24744391b5f14b0399afa84

  • Size

    931KB

  • Sample

    221124-jt8rmaab86

  • MD5

    4def9d508fedaa4dbdff1cf5deb56993

  • SHA1

    10f4378c485f006eb2f527983df7d215d026fcd5

  • SHA256

    7d0a638d6c0a3766756f99265ecdd65b8a4677caf24744391b5f14b0399afa84

  • SHA512

    faf5e79c1a61ed606bd6879cb03c94825e5c21156085988abe9588d73d1a77ca6c6492182ea74b06b96a51fb3450681abbd8ab06515c4a6287611978902b2c75

  • SSDEEP

    24576:h1OYdaO7MWSUbvCXEQKSqGv8VWumF6RmcJozyPvpfg:h1OsRMWyUQ+GUVFIcHPvpfg

Score
8/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      7d0a638d6c0a3766756f99265ecdd65b8a4677caf24744391b5f14b0399afa84

    • Size

      931KB

    • MD5

      4def9d508fedaa4dbdff1cf5deb56993

    • SHA1

      10f4378c485f006eb2f527983df7d215d026fcd5

    • SHA256

      7d0a638d6c0a3766756f99265ecdd65b8a4677caf24744391b5f14b0399afa84

    • SHA512

      faf5e79c1a61ed606bd6879cb03c94825e5c21156085988abe9588d73d1a77ca6c6492182ea74b06b96a51fb3450681abbd8ab06515c4a6287611978902b2c75

    • SSDEEP

      24576:h1OYdaO7MWSUbvCXEQKSqGv8VWumF6RmcJozyPvpfg:h1OsRMWyUQ+GUVFIcHPvpfg

    Score
    8/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks