Overview

overview

8

Static

static

ce76046a73...30.exe

windows7-x64

8

ce76046a73...30.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ce76046a73e55b5f84f3e5a86c795ae65b8e929738560ab3da8ba6a78f238b30

  • Size

    929KB

  • Sample

    221124-xp2dmsda43

  • MD5

    093209628fd8e85e72b4f50322ba0cf7

  • SHA1

    778ad342183c9d5a3188490568af3f58427ba66a

  • SHA256

    ce76046a73e55b5f84f3e5a86c795ae65b8e929738560ab3da8ba6a78f238b30

  • SHA512

    5bdb8bca780440c2cfdc056e58d17b5db52f5359f1bb9577427d81e82f989fd0b6ac21939fc6fc906c082093020ae7f0e3b2c87df35000009a5d95cc8bb6806d

  • SSDEEP

    12288:h1OgLdaOkj7sQInQJjBInHL9yiJ1mjwfX+hk/7UtImPLOQsbXiazu29A6kEpHx:h1OYdaOY7DyWgc0sMXmPLOQwij2lBHx

Score
8/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      ce76046a73e55b5f84f3e5a86c795ae65b8e929738560ab3da8ba6a78f238b30

    • Size

      929KB

    • MD5

      093209628fd8e85e72b4f50322ba0cf7

    • SHA1

      778ad342183c9d5a3188490568af3f58427ba66a

    • SHA256

      ce76046a73e55b5f84f3e5a86c795ae65b8e929738560ab3da8ba6a78f238b30

    • SHA512

      5bdb8bca780440c2cfdc056e58d17b5db52f5359f1bb9577427d81e82f989fd0b6ac21939fc6fc906c082093020ae7f0e3b2c87df35000009a5d95cc8bb6806d

    • SSDEEP

      12288:h1OgLdaOkj7sQInQJjBInHL9yiJ1mjwfX+hk/7UtImPLOQsbXiazu29A6kEpHx:h1OYdaOY7DyWgc0sMXmPLOQwij2lBHx

    Score
    8/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks