Overview

overview

8

Static

static

c3dc019db4...ea.exe

windows7-x64

8

c3dc019db4...ea.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c3dc019db42078293b29f16388dcaceac8bb4a0abde27f3d63131429d4d5abea

  • Size

    931KB

  • Sample

    221124-yb1qmaed35

  • MD5

    f9f9a46591b6a28524cd000c923210b3

  • SHA1

    684d2a2a86a79809417039b75dd3de58580cbbba

  • SHA256

    c3dc019db42078293b29f16388dcaceac8bb4a0abde27f3d63131429d4d5abea

  • SHA512

    56f26c4a88873fcae055a82374d58c8ccbd71c01e48824cd077dfc4f1d27867c509e8f4bf8c82536bebd0273e87a1dc3f775613f17defeff6f807677c78fc481

  • SSDEEP

    24576:h1OYdaO5CZ/iWCvu/2sWsJA/jlt+DHhse:h1OsvCpYO/dJJDHhse

Score
8/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      c3dc019db42078293b29f16388dcaceac8bb4a0abde27f3d63131429d4d5abea

    • Size

      931KB

    • MD5

      f9f9a46591b6a28524cd000c923210b3

    • SHA1

      684d2a2a86a79809417039b75dd3de58580cbbba

    • SHA256

      c3dc019db42078293b29f16388dcaceac8bb4a0abde27f3d63131429d4d5abea

    • SHA512

      56f26c4a88873fcae055a82374d58c8ccbd71c01e48824cd077dfc4f1d27867c509e8f4bf8c82536bebd0273e87a1dc3f775613f17defeff6f807677c78fc481

    • SSDEEP

      24576:h1OYdaO5CZ/iWCvu/2sWsJA/jlt+DHhse:h1OsvCpYO/dJJDHhse

    Score
    8/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks