Overview

overview

8

Static

static

fed4ef32fb...96.exe

windows7-x64

8

fed4ef32fb...96.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fed4ef32fb25a4d2f06eccbcc24850f46985b17854328447de7de47840993c96

  • Size

    931KB

  • Sample

    221124-twelnsac8t

  • MD5

    96f2bdc8dc1347d4cc3d245fc6631f67

  • SHA1

    4ca891e2041c1dff3c410b5d2d6cc617a03030e5

  • SHA256

    fed4ef32fb25a4d2f06eccbcc24850f46985b17854328447de7de47840993c96

  • SHA512

    d73170585ed1c7756fd0d345c4b525ed7290f2d8ec171e04d45b6b8c4ad20b10369daad1dd6fffae36f6dfc901479ee973829c5a7b257ed2ca72f6538c545c15

  • SSDEEP

    24576:h1OYdaOjCZ/iWCvu/2sWsJA/jlt+DHhsu:h1OsZCpYO/dJJDHhsu

Score
8/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      fed4ef32fb25a4d2f06eccbcc24850f46985b17854328447de7de47840993c96

    • Size

      931KB

    • MD5

      96f2bdc8dc1347d4cc3d245fc6631f67

    • SHA1

      4ca891e2041c1dff3c410b5d2d6cc617a03030e5

    • SHA256

      fed4ef32fb25a4d2f06eccbcc24850f46985b17854328447de7de47840993c96

    • SHA512

      d73170585ed1c7756fd0d345c4b525ed7290f2d8ec171e04d45b6b8c4ad20b10369daad1dd6fffae36f6dfc901479ee973829c5a7b257ed2ca72f6538c545c15

    • SSDEEP

      24576:h1OYdaOjCZ/iWCvu/2sWsJA/jlt+DHhsu:h1OsZCpYO/dJJDHhsu

    Score
    8/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks