Overview

overview

8

Static

static

fe231bf76e...12.exe

windows7-x64

8

fe231bf76e...12.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fe231bf76e83291d01f39604224f5a7498a17619f528a1d4eafd80be01ff9d12

  • Size

    931KB

  • Sample

    221124-txjl1sfb45

  • MD5

    b03ad3631078c21a0bfd99ef210d5914

  • SHA1

    5841de699e460a9cf2419c6a1aaa4669f8f85c88

  • SHA256

    fe231bf76e83291d01f39604224f5a7498a17619f528a1d4eafd80be01ff9d12

  • SHA512

    15e8b281d053075a6ab598c88fce3cf35d52450c10839e29ed2fe8f5669f6e98905d738b9d5ba4de1f76d5805039cb9c328ae2cf87a4a859070c6cd030fe27f6

  • SSDEEP

    24576:h1OYdaOKCZ/iWCvu/2sWsJA/jlt+DHhsaV:h1Os0CpYO/dJJDHhsaV

Score
8/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      fe231bf76e83291d01f39604224f5a7498a17619f528a1d4eafd80be01ff9d12

    • Size

      931KB

    • MD5

      b03ad3631078c21a0bfd99ef210d5914

    • SHA1

      5841de699e460a9cf2419c6a1aaa4669f8f85c88

    • SHA256

      fe231bf76e83291d01f39604224f5a7498a17619f528a1d4eafd80be01ff9d12

    • SHA512

      15e8b281d053075a6ab598c88fce3cf35d52450c10839e29ed2fe8f5669f6e98905d738b9d5ba4de1f76d5805039cb9c328ae2cf87a4a859070c6cd030fe27f6

    • SSDEEP

      24576:h1OYdaOKCZ/iWCvu/2sWsJA/jlt+DHhsaV:h1Os0CpYO/dJJDHhsaV

    Score
    8/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks