Overview

overview

8

Static

static

ff68943b4f...c2.exe

windows7-x64

8

ff68943b4f...c2.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ff68943b4fad534f17cfcd506a6f94860100426bc79a27c7fa41d8f19f6f81c2

  • Size

    927KB

  • Sample

    221124-tvev2sfa35

  • MD5

    74eaf0f5f580e885caa3eaeb2f7b8ade

  • SHA1

    49cbaeb55d8185104499052ddc693ec3f31bc582

  • SHA256

    ff68943b4fad534f17cfcd506a6f94860100426bc79a27c7fa41d8f19f6f81c2

  • SHA512

    d4f08a9d851f469ebb6d993be32819662114f3c7f8d4480f5e91b2c0ee695683a43207bb84acf232a14d2834d7483daebd4ef6c792a4d87ce998983efa810725

  • SSDEEP

    24576:h1OYdaOxnQju5vMu6qN2FctIOBYXZBai3GBlgpKLe/7r3:h1OsfQjO6HHzayGBe/7r3

Score
8/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      ff68943b4fad534f17cfcd506a6f94860100426bc79a27c7fa41d8f19f6f81c2

    • Size

      927KB

    • MD5

      74eaf0f5f580e885caa3eaeb2f7b8ade

    • SHA1

      49cbaeb55d8185104499052ddc693ec3f31bc582

    • SHA256

      ff68943b4fad534f17cfcd506a6f94860100426bc79a27c7fa41d8f19f6f81c2

    • SHA512

      d4f08a9d851f469ebb6d993be32819662114f3c7f8d4480f5e91b2c0ee695683a43207bb84acf232a14d2834d7483daebd4ef6c792a4d87ce998983efa810725

    • SSDEEP

      24576:h1OYdaOxnQju5vMu6qN2FctIOBYXZBai3GBlgpKLe/7r3:h1OsfQjO6HHzayGBe/7r3

    Score
    8/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks