Overview

overview

8

Static

static

cabcc24012...b5.exe

windows7-x64

8

cabcc24012...b5.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cabcc24012f601444f57ca02eb7973a9794a52f0be18bb9ce403dc1c2faa91b5

  • Size

    920KB

  • Sample

    221124-xx45hage9x

  • MD5

    678e119e52fc12d771fae641f2799153

  • SHA1

    83c6dfcd3a5ff3c020ae256df545a2d1686949b8

  • SHA256

    cabcc24012f601444f57ca02eb7973a9794a52f0be18bb9ce403dc1c2faa91b5

  • SHA512

    bd8d657c16274d9437472785d9ad6259e83a3a0f6c5b614cdf4cef434402ce0fadfe7da42518c394c8d22fd0da718dc0bab1b135cbae87cefd22765891e228f0

  • SSDEEP

    24576:h1OYdaOmMtdHAqcdDVhYwiei7+EpFAh/kK9:h1OszPHVmVhYwiLtKkK9

Score
8/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      cabcc24012f601444f57ca02eb7973a9794a52f0be18bb9ce403dc1c2faa91b5

    • Size

      920KB

    • MD5

      678e119e52fc12d771fae641f2799153

    • SHA1

      83c6dfcd3a5ff3c020ae256df545a2d1686949b8

    • SHA256

      cabcc24012f601444f57ca02eb7973a9794a52f0be18bb9ce403dc1c2faa91b5

    • SHA512

      bd8d657c16274d9437472785d9ad6259e83a3a0f6c5b614cdf4cef434402ce0fadfe7da42518c394c8d22fd0da718dc0bab1b135cbae87cefd22765891e228f0

    • SSDEEP

      24576:h1OYdaOmMtdHAqcdDVhYwiei7+EpFAh/kK9:h1OszPHVmVhYwiLtKkK9

    Score
    8/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks