Overview

overview

8

Static

static

febda2f598...f4.exe

windows7-x64

8

febda2f598...f4.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    febda2f598eca6de67cb76043cc3346a0b00111cdbc00c11195887a45cd21ff4

  • Size

    920KB

  • Sample

    221124-twj66afa79

  • MD5

    0070641763f0a156a076ad3ed18c5eb2

  • SHA1

    583f5214ab3a0fe5feed9001f82d862240c28c70

  • SHA256

    febda2f598eca6de67cb76043cc3346a0b00111cdbc00c11195887a45cd21ff4

  • SHA512

    52c08ac42f68105cd1ae3e0d64bd589572735d1054d8e773d9b3090f3c47dbe9546916055cff9e4d39a9ba6925e3877c04a462c3f5beb57d73374d2176b65f96

  • SSDEEP

    24576:h1OYdaOAMtdHAqcdDVhYwiei7+EpFAh/kKL:h1OsxPHVmVhYwiLtKkKL

Score
8/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      febda2f598eca6de67cb76043cc3346a0b00111cdbc00c11195887a45cd21ff4

    • Size

      920KB

    • MD5

      0070641763f0a156a076ad3ed18c5eb2

    • SHA1

      583f5214ab3a0fe5feed9001f82d862240c28c70

    • SHA256

      febda2f598eca6de67cb76043cc3346a0b00111cdbc00c11195887a45cd21ff4

    • SHA512

      52c08ac42f68105cd1ae3e0d64bd589572735d1054d8e773d9b3090f3c47dbe9546916055cff9e4d39a9ba6925e3877c04a462c3f5beb57d73374d2176b65f96

    • SSDEEP

      24576:h1OYdaOAMtdHAqcdDVhYwiei7+EpFAh/kKL:h1OsxPHVmVhYwiLtKkKL

    Score
    8/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks