Overview

overview

8

Static

static

fc0c01dc47...38.exe

windows7-x64

8

fc0c01dc47...38.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fc0c01dc47602ee3c3ab452587e35dc4fdde5b4af7d7b56ce559eceeb75e0a38

  • Size

    931KB

  • Sample

    221124-t2cn9sfd55

  • MD5

    8efbaac45550cd312e0617d8e2df214b

  • SHA1

    65d9ad7810c00ccf1171babd6e69cfcffbd3b0df

  • SHA256

    fc0c01dc47602ee3c3ab452587e35dc4fdde5b4af7d7b56ce559eceeb75e0a38

  • SHA512

    51682f0230ae61dcaa30eaa38dc51ca87e8a9eb6c143fbfcb515653459f5f2b78cf32311e88e906c2b03eddea93480499501e960167b0a48cfb4d2e1ea1f81ba

  • SSDEEP

    24576:h1OYdaOACZ/iWCvu/2sWsJA/jlt+DHhsL:h1Os+CpYO/dJJDHhsL

Score
8/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      fc0c01dc47602ee3c3ab452587e35dc4fdde5b4af7d7b56ce559eceeb75e0a38

    • Size

      931KB

    • MD5

      8efbaac45550cd312e0617d8e2df214b

    • SHA1

      65d9ad7810c00ccf1171babd6e69cfcffbd3b0df

    • SHA256

      fc0c01dc47602ee3c3ab452587e35dc4fdde5b4af7d7b56ce559eceeb75e0a38

    • SHA512

      51682f0230ae61dcaa30eaa38dc51ca87e8a9eb6c143fbfcb515653459f5f2b78cf32311e88e906c2b03eddea93480499501e960167b0a48cfb4d2e1ea1f81ba

    • SSDEEP

      24576:h1OYdaOACZ/iWCvu/2sWsJA/jlt+DHhsL:h1Os+CpYO/dJJDHhsL

    Score
    8/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks