Overview

overview

8

Static

static

cece4f9940...fa.exe

windows7-x64

8

cece4f9940...fa.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cece4f99406aedf8deacd659461c3f77f855da101c3aba3616df4f1c94535cfa

  • Size

    931KB

  • Sample

    221124-xpd84sch95

  • MD5

    83ea2c5d92011009c0a85f1863eae58d

  • SHA1

    20fd89c86924d59f0676579cbc652b3ec71cc061

  • SHA256

    cece4f99406aedf8deacd659461c3f77f855da101c3aba3616df4f1c94535cfa

  • SHA512

    2a8e2165f65504ccd90bb767ab8517c23cc00f1f770dd589cfa6f502d9a51e8c5a2fd98d0dfe7bbb43a41a92eacf955239eaa01fa57e2ad178f5530ac62704ae

  • SSDEEP

    24576:h1OYdaOyCZ/iWCvu/2sWsJA/jlt+DHhsL:h1OsQCpYO/dJJDHhsL

Score
8/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      cece4f99406aedf8deacd659461c3f77f855da101c3aba3616df4f1c94535cfa

    • Size

      931KB

    • MD5

      83ea2c5d92011009c0a85f1863eae58d

    • SHA1

      20fd89c86924d59f0676579cbc652b3ec71cc061

    • SHA256

      cece4f99406aedf8deacd659461c3f77f855da101c3aba3616df4f1c94535cfa

    • SHA512

      2a8e2165f65504ccd90bb767ab8517c23cc00f1f770dd589cfa6f502d9a51e8c5a2fd98d0dfe7bbb43a41a92eacf955239eaa01fa57e2ad178f5530ac62704ae

    • SSDEEP

      24576:h1OYdaOyCZ/iWCvu/2sWsJA/jlt+DHhsL:h1OsQCpYO/dJJDHhsL

    Score
    8/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks