Overview

overview

8

Static

static

c9df4f035c...8c.exe

windows7-x64

8

c9df4f035c...8c.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c9df4f035c16fa43465b3183d56b753f42a69a54e612e81738a0d0ef8f8c328c

  • Size

    932KB

  • Sample

    221124-xzt3badf35

  • MD5

    2b63b748fec4f869a0edf1a5085569f0

  • SHA1

    9a1bb45ddbcd03c12d27a6794355e746069b3a2d

  • SHA256

    c9df4f035c16fa43465b3183d56b753f42a69a54e612e81738a0d0ef8f8c328c

  • SHA512

    12fc54ce57eace1ab45d81c6a7ccde8f04ca9cf1403ad36f24fb689b9ffdcbeeea0526df83667b06d020120242af4d2a883f4b943f6a913058d3bab8e644af7b

  • SSDEEP

    24576:h1OYdaOoCZ/iWCvu/2sWsJA/jlt+DHhsH:h1OsWCpYO/dJJDHhsH

Score
8/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      c9df4f035c16fa43465b3183d56b753f42a69a54e612e81738a0d0ef8f8c328c

    • Size

      932KB

    • MD5

      2b63b748fec4f869a0edf1a5085569f0

    • SHA1

      9a1bb45ddbcd03c12d27a6794355e746069b3a2d

    • SHA256

      c9df4f035c16fa43465b3183d56b753f42a69a54e612e81738a0d0ef8f8c328c

    • SHA512

      12fc54ce57eace1ab45d81c6a7ccde8f04ca9cf1403ad36f24fb689b9ffdcbeeea0526df83667b06d020120242af4d2a883f4b943f6a913058d3bab8e644af7b

    • SSDEEP

      24576:h1OYdaOoCZ/iWCvu/2sWsJA/jlt+DHhsH:h1OsWCpYO/dJJDHhsH

    Score
    8/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks