Overview

overview

8

Static

static

fa2d3f3cff...2e.exe

windows7-x64

8

fa2d3f3cff...2e.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fa2d3f3cff7ef845f74d11fd7c159e1f546d0e674eaa4e30e0c829dceceafc2e

  • Size

    931KB

  • Sample

    221124-t5m96sff47

  • MD5

    2514d38f283712996e22c9fc652f981b

  • SHA1

    d945f074a484c8e8b68e8df8b66579067efa3f5f

  • SHA256

    fa2d3f3cff7ef845f74d11fd7c159e1f546d0e674eaa4e30e0c829dceceafc2e

  • SHA512

    37993d707bf5de7d3fd84df2241f300a16a1cf04c5e7485eef9c553f7968cd4f2dc572754b12e23653288ee40c4e76649c1f032746af52214aab2fb0a6f87694

  • SSDEEP

    24576:h1OYdaOfCZ/iWCvu/2sWsJA/jlt+DHhsJ:h1OsFCpYO/dJJDHhsJ

Score
8/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      fa2d3f3cff7ef845f74d11fd7c159e1f546d0e674eaa4e30e0c829dceceafc2e

    • Size

      931KB

    • MD5

      2514d38f283712996e22c9fc652f981b

    • SHA1

      d945f074a484c8e8b68e8df8b66579067efa3f5f

    • SHA256

      fa2d3f3cff7ef845f74d11fd7c159e1f546d0e674eaa4e30e0c829dceceafc2e

    • SHA512

      37993d707bf5de7d3fd84df2241f300a16a1cf04c5e7485eef9c553f7968cd4f2dc572754b12e23653288ee40c4e76649c1f032746af52214aab2fb0a6f87694

    • SSDEEP

      24576:h1OYdaOfCZ/iWCvu/2sWsJA/jlt+DHhsJ:h1OsFCpYO/dJJDHhsJ

    Score
    8/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks