Overview

overview

8

Static

static

fd63c95511...27.exe

windows7-x64

8

fd63c95511...27.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fd63c955111109e1ba34079cd58373f4f5fa949d65d423644b3c697f60a56627

  • Size

    931KB

  • Sample

    221124-tyt45sae2t

  • MD5

    b89c200d5e1083e8a62eb3128793c8f8

  • SHA1

    63170df935eed8cd9894943c42bf2b801249d21a

  • SHA256

    fd63c955111109e1ba34079cd58373f4f5fa949d65d423644b3c697f60a56627

  • SHA512

    4e976ad77665d477cd854f12a3f5660c89f4424b16245b5611710cec8f0b24ff644681051018f09016c658038acb6365975a2ce5fe51946ba0e4c2b7027e7e80

  • SSDEEP

    24576:h1OYdaOvCZ/iWCvu/2sWsJA/jlt+DHhsO:h1OsFCpYO/dJJDHhsO

Score
8/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      fd63c955111109e1ba34079cd58373f4f5fa949d65d423644b3c697f60a56627

    • Size

      931KB

    • MD5

      b89c200d5e1083e8a62eb3128793c8f8

    • SHA1

      63170df935eed8cd9894943c42bf2b801249d21a

    • SHA256

      fd63c955111109e1ba34079cd58373f4f5fa949d65d423644b3c697f60a56627

    • SHA512

      4e976ad77665d477cd854f12a3f5660c89f4424b16245b5611710cec8f0b24ff644681051018f09016c658038acb6365975a2ce5fe51946ba0e4c2b7027e7e80

    • SSDEEP

      24576:h1OYdaOvCZ/iWCvu/2sWsJA/jlt+DHhsO:h1OsFCpYO/dJJDHhsO

    Score
    8/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks