Overview

overview

8

Static

static

ff107c108a...b1.exe

windows7-x64

8

ff107c108a...b1.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ff107c108a4603975815d1b6dc7c50cbb2128c497be12a2cc512091f81c71ab1

  • Size

    931KB

  • Sample

    221124-tvtzzafa48

  • MD5

    4b9def2129f8e53bb2519918730d2ebc

  • SHA1

    95b4f2567625cc05acfabb994c0bf72050186acb

  • SHA256

    ff107c108a4603975815d1b6dc7c50cbb2128c497be12a2cc512091f81c71ab1

  • SHA512

    317b6ad96e41b4a38337e9af21d6cb84ee5d8d8cca32f68eb53a145d5579ba6c82f7a9c4bea3af05203ea59711e7314de8db99081a3cb935cdf934a98a8eaf15

  • SSDEEP

    24576:h1OYdaOmCZ/iWCvu/2sWsJA/jlt+DHhs0:h1Os8CpYO/dJJDHhs0

Score
8/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      ff107c108a4603975815d1b6dc7c50cbb2128c497be12a2cc512091f81c71ab1

    • Size

      931KB

    • MD5

      4b9def2129f8e53bb2519918730d2ebc

    • SHA1

      95b4f2567625cc05acfabb994c0bf72050186acb

    • SHA256

      ff107c108a4603975815d1b6dc7c50cbb2128c497be12a2cc512091f81c71ab1

    • SHA512

      317b6ad96e41b4a38337e9af21d6cb84ee5d8d8cca32f68eb53a145d5579ba6c82f7a9c4bea3af05203ea59711e7314de8db99081a3cb935cdf934a98a8eaf15

    • SSDEEP

      24576:h1OYdaOmCZ/iWCvu/2sWsJA/jlt+DHhs0:h1Os8CpYO/dJJDHhs0

    Score
    8/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks