Overview

overview

8

Static

static

c5c84e449d...9d.exe

windows7-x64

8

c5c84e449d...9d.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c5c84e449d1ffcd46da4729632cc7b6f9a87d701aa1bc54f5074c1b28be45a9d

  • Size

    920KB

  • Sample

    221124-x8y3maeb67

  • MD5

    9f4517be515b6711284c152b2be0f839

  • SHA1

    dd7c6ae2ae2e326c9c6f258675e36076fb7adabb

  • SHA256

    c5c84e449d1ffcd46da4729632cc7b6f9a87d701aa1bc54f5074c1b28be45a9d

  • SHA512

    d011e7823d7c1de4a22d471f160eb71ca86b5e0d0ec87cb0e51f88e82dc96ab681bdaf7f836be844d29190c4ceb35c7a9f1017c1b8f1275508ad341b2d9215da

  • SSDEEP

    24576:h1OYdaOwMtdHAqcdDVhYwiei7+EpFAh/kKp:h1OsxPHVmVhYwiLtKkKp

Score
8/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      c5c84e449d1ffcd46da4729632cc7b6f9a87d701aa1bc54f5074c1b28be45a9d

    • Size

      920KB

    • MD5

      9f4517be515b6711284c152b2be0f839

    • SHA1

      dd7c6ae2ae2e326c9c6f258675e36076fb7adabb

    • SHA256

      c5c84e449d1ffcd46da4729632cc7b6f9a87d701aa1bc54f5074c1b28be45a9d

    • SHA512

      d011e7823d7c1de4a22d471f160eb71ca86b5e0d0ec87cb0e51f88e82dc96ab681bdaf7f836be844d29190c4ceb35c7a9f1017c1b8f1275508ad341b2d9215da

    • SSDEEP

      24576:h1OYdaOwMtdHAqcdDVhYwiei7+EpFAh/kKp:h1OsxPHVmVhYwiLtKkKp

    Score
    8/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks