Overview

overview

8

Static

static

fd3d44c6a6...1d.exe

windows7-x64

8

fd3d44c6a6...1d.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fd3d44c6a69084102dacc7d2547c90f5362f8d3ddaaf69f85ae2d19aaff69d1d

  • Size

    931KB

  • Sample

    221124-ty64psfc43

  • MD5

    73d292c599bc817cdcebd61b34fdb61d

  • SHA1

    035d32cf4f60eb5be030908fa00ca9eda28b2e7d

  • SHA256

    fd3d44c6a69084102dacc7d2547c90f5362f8d3ddaaf69f85ae2d19aaff69d1d

  • SHA512

    091ae24f3e2cfa1da01babdb722cb947e4868a224d962270c68db5da02304f587fdd0f24f5884d5eab4d820fd6c9aad67fc0e249e3a978ace9a4540816a4ec00

  • SSDEEP

    24576:h1OYdaOtCZ/iWCvu/2sWsJA/jlt+DHhsT:h1OsnCpYO/dJJDHhsT

Score
8/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      fd3d44c6a69084102dacc7d2547c90f5362f8d3ddaaf69f85ae2d19aaff69d1d

    • Size

      931KB

    • MD5

      73d292c599bc817cdcebd61b34fdb61d

    • SHA1

      035d32cf4f60eb5be030908fa00ca9eda28b2e7d

    • SHA256

      fd3d44c6a69084102dacc7d2547c90f5362f8d3ddaaf69f85ae2d19aaff69d1d

    • SHA512

      091ae24f3e2cfa1da01babdb722cb947e4868a224d962270c68db5da02304f587fdd0f24f5884d5eab4d820fd6c9aad67fc0e249e3a978ace9a4540816a4ec00

    • SSDEEP

      24576:h1OYdaOtCZ/iWCvu/2sWsJA/jlt+DHhsT:h1OsnCpYO/dJJDHhsT

    Score
    8/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks