Overview

overview

8

Static

static

ca9c54e2f2...3a.exe

windows7-x64

8

ca9c54e2f2...3a.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ca9c54e2f27b2c0fa589db1002f686859ab64db9c9cfa18c32d3cbfda5e31b3a

  • Size

    920KB

  • Sample

    221124-xydc6sgf2z

  • MD5

    0049f5cebdda48ff9b66906d58aa343a

  • SHA1

    a7a59668a501cd1c9231704622affc2d40e62500

  • SHA256

    ca9c54e2f27b2c0fa589db1002f686859ab64db9c9cfa18c32d3cbfda5e31b3a

  • SHA512

    0e42110d70bb9a07f45ed4ccab2be6fe64c466ed817e782a3428bbafa54add86eea50b4b5a84a5c241e7efa28218807f612a0a6c26a8d86eeb1d4815c52db9fd

  • SSDEEP

    24576:h1OYdaOIMtdHAqcdDVhYwiei7+EpFAh/kKQ:h1OsxPHVmVhYwiLtKkKQ

Score
8/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      ca9c54e2f27b2c0fa589db1002f686859ab64db9c9cfa18c32d3cbfda5e31b3a

    • Size

      920KB

    • MD5

      0049f5cebdda48ff9b66906d58aa343a

    • SHA1

      a7a59668a501cd1c9231704622affc2d40e62500

    • SHA256

      ca9c54e2f27b2c0fa589db1002f686859ab64db9c9cfa18c32d3cbfda5e31b3a

    • SHA512

      0e42110d70bb9a07f45ed4ccab2be6fe64c466ed817e782a3428bbafa54add86eea50b4b5a84a5c241e7efa28218807f612a0a6c26a8d86eeb1d4815c52db9fd

    • SSDEEP

      24576:h1OYdaOIMtdHAqcdDVhYwiei7+EpFAh/kKQ:h1OsxPHVmVhYwiLtKkKQ

    Score
    8/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks