Overview

overview

8

Static

static

ff616c994b...3a.exe

windows7-x64

8

ff616c994b...3a.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ff616c994b9345f28eb7dfaa05cdbf646e9d1b8c1eaf318470b4b3dc920a873a

  • Size

    920KB

  • Sample

    221124-tvg1eafa37

  • MD5

    e413bebe96bd48e95c260fbb7787ca85

  • SHA1

    7bd2ff836483738fe310100da012b608fc3bb0a4

  • SHA256

    ff616c994b9345f28eb7dfaa05cdbf646e9d1b8c1eaf318470b4b3dc920a873a

  • SHA512

    92854478fe6615184b23e75966a0723b5a29ab855d620da343bb5a6ec10a3d83c7b2119ba9d9831b92021f8fc07daf28bff19eaaa7d36b3e0f4aa6d446791548

  • SSDEEP

    24576:h1OYdaOmMtdHAqcdDVhYwiei7+EpFAh/kKg:h1OsPPHVmVhYwiLtKkKg

Score
8/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      ff616c994b9345f28eb7dfaa05cdbf646e9d1b8c1eaf318470b4b3dc920a873a

    • Size

      920KB

    • MD5

      e413bebe96bd48e95c260fbb7787ca85

    • SHA1

      7bd2ff836483738fe310100da012b608fc3bb0a4

    • SHA256

      ff616c994b9345f28eb7dfaa05cdbf646e9d1b8c1eaf318470b4b3dc920a873a

    • SHA512

      92854478fe6615184b23e75966a0723b5a29ab855d620da343bb5a6ec10a3d83c7b2119ba9d9831b92021f8fc07daf28bff19eaaa7d36b3e0f4aa6d446791548

    • SSDEEP

      24576:h1OYdaOmMtdHAqcdDVhYwiei7+EpFAh/kKg:h1OsPPHVmVhYwiLtKkKg

    Score
    8/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks