Overview

overview

8

Static

static

c5ab5cf25a...c9.exe

windows7-x64

8

c5ab5cf25a...c9.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c5ab5cf25a8b60b5d670bafd52328599d584eec567f1ae7dc4ac3e407a7f35c9

  • Size

    931KB

  • Sample

    221124-x825aahc51

  • MD5

    9eea1287b32cc5073c96d04141364557

  • SHA1

    edbc623c54522064bf571e1354ef875cda3241af

  • SHA256

    c5ab5cf25a8b60b5d670bafd52328599d584eec567f1ae7dc4ac3e407a7f35c9

  • SHA512

    6610331b7a8334a0801171c97617599c31ed1ae3a8e916d44253d6efde44e2578a50f596cabb977456fc7e767142cc6666f0745bf0b75aebe8df39fb86fd8efd

  • SSDEEP

    24576:h1OYdaOWCZ/iWCvu/2sWsJA/jlt+DHhsu:h1OsACpYO/dJJDHhsu

Score
8/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      c5ab5cf25a8b60b5d670bafd52328599d584eec567f1ae7dc4ac3e407a7f35c9

    • Size

      931KB

    • MD5

      9eea1287b32cc5073c96d04141364557

    • SHA1

      edbc623c54522064bf571e1354ef875cda3241af

    • SHA256

      c5ab5cf25a8b60b5d670bafd52328599d584eec567f1ae7dc4ac3e407a7f35c9

    • SHA512

      6610331b7a8334a0801171c97617599c31ed1ae3a8e916d44253d6efde44e2578a50f596cabb977456fc7e767142cc6666f0745bf0b75aebe8df39fb86fd8efd

    • SSDEEP

      24576:h1OYdaOWCZ/iWCvu/2sWsJA/jlt+DHhsu:h1OsACpYO/dJJDHhsu

    Score
    8/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks