Overview

overview

8

Static

static

c96b54e506...9d.exe

windows7-x64

8

c96b54e506...9d.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c96b54e5065ea067682c3783e19ed0f807ef04937322961673db617ccae8d59d

  • Size

    932KB

  • Sample

    221124-x1wmjagg6v

  • MD5

    cad2ef8e9ef16792522b7d0e5d8e460b

  • SHA1

    56068326c624d943368a63f33dfe3b255810c517

  • SHA256

    c96b54e5065ea067682c3783e19ed0f807ef04937322961673db617ccae8d59d

  • SHA512

    94dc735275158a496c61d9a80e5e4775ca0890cfcfe287df9bdf0b4d29d8a188e6b05408f5800de0d623b3913205589f540a6714b4dac542a3fd5f28cfc89f92

  • SSDEEP

    24576:h1OYdaOAzzy3zzyOCZ/iWCvu/2sWsJA/jlt+DHhsF:h1OsdCpYO/dJJDHhsF

Score
8/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      c96b54e5065ea067682c3783e19ed0f807ef04937322961673db617ccae8d59d

    • Size

      932KB

    • MD5

      cad2ef8e9ef16792522b7d0e5d8e460b

    • SHA1

      56068326c624d943368a63f33dfe3b255810c517

    • SHA256

      c96b54e5065ea067682c3783e19ed0f807ef04937322961673db617ccae8d59d

    • SHA512

      94dc735275158a496c61d9a80e5e4775ca0890cfcfe287df9bdf0b4d29d8a188e6b05408f5800de0d623b3913205589f540a6714b4dac542a3fd5f28cfc89f92

    • SSDEEP

      24576:h1OYdaOAzzy3zzyOCZ/iWCvu/2sWsJA/jlt+DHhsF:h1OsdCpYO/dJJDHhsF

    Score
    8/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks