Overview

overview

8

Static

static

fba9f2141e...7a.exe

windows7-x64

8

fba9f2141e...7a.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fba9f2141e74aa8d861bccc9e6a5031102f69247bbe2e29321699a99e8e6147a

  • Size

    920KB

  • Sample

    221124-t23wfsfd92

  • MD5

    a0b9d4bae69ad11aae4021dfe10234dd

  • SHA1

    27f0fe1a83aefffb20d3dcac656f866efa3f70f8

  • SHA256

    fba9f2141e74aa8d861bccc9e6a5031102f69247bbe2e29321699a99e8e6147a

  • SHA512

    5852e8fd6f5685b3a960589f7ad0bd2030a047f5d7ac7cd7bea3e2c34ffe67e857555141dcfcfbd3778f9b3916510a08854d251a2ca134472d9f0cbdc3b8d3ac

  • SSDEEP

    24576:h1OYdaOBMtdHAqcdDVhYwiei7+EpFAh/kKR:h1Os8PHVmVhYwiLtKkKR

Score
8/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      fba9f2141e74aa8d861bccc9e6a5031102f69247bbe2e29321699a99e8e6147a

    • Size

      920KB

    • MD5

      a0b9d4bae69ad11aae4021dfe10234dd

    • SHA1

      27f0fe1a83aefffb20d3dcac656f866efa3f70f8

    • SHA256

      fba9f2141e74aa8d861bccc9e6a5031102f69247bbe2e29321699a99e8e6147a

    • SHA512

      5852e8fd6f5685b3a960589f7ad0bd2030a047f5d7ac7cd7bea3e2c34ffe67e857555141dcfcfbd3778f9b3916510a08854d251a2ca134472d9f0cbdc3b8d3ac

    • SSDEEP

      24576:h1OYdaOBMtdHAqcdDVhYwiei7+EpFAh/kKR:h1Os8PHVmVhYwiLtKkKR

    Score
    8/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks