Overview

overview

8

Static

static

c3db2b3bf3...57.exe

windows7-x64

8

c3db2b3bf3...57.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c3db2b3bf35a4b46f94b1de45d952ef3552e0279a226610620322e03f2121257

  • Size

    932KB

  • Sample

    221124-yb3j8ahe21

  • MD5

    7a1cf15ff70a8a1bdebf75dd43456dd7

  • SHA1

    ce5aa2d2370982527cac9e54d095728fbe7da307

  • SHA256

    c3db2b3bf35a4b46f94b1de45d952ef3552e0279a226610620322e03f2121257

  • SHA512

    bf88b579625bf0f5ec0358219629e604c3e0c0d20800ce2bea4ec62d709bded830ba6fe6a1bde9b7a60cd1d3dd33102acb772dee6167c1cb9cef7f2cbdd6b018

  • SSDEEP

    24576:h1OYdaOQCZ/iWCvu/2sWsJA/jlt+DHhsn:h1OsiCpYO/dJJDHhsn

Score
8/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      c3db2b3bf35a4b46f94b1de45d952ef3552e0279a226610620322e03f2121257

    • Size

      932KB

    • MD5

      7a1cf15ff70a8a1bdebf75dd43456dd7

    • SHA1

      ce5aa2d2370982527cac9e54d095728fbe7da307

    • SHA256

      c3db2b3bf35a4b46f94b1de45d952ef3552e0279a226610620322e03f2121257

    • SHA512

      bf88b579625bf0f5ec0358219629e604c3e0c0d20800ce2bea4ec62d709bded830ba6fe6a1bde9b7a60cd1d3dd33102acb772dee6167c1cb9cef7f2cbdd6b018

    • SSDEEP

      24576:h1OYdaOQCZ/iWCvu/2sWsJA/jlt+DHhsn:h1OsiCpYO/dJJDHhsn

    Score
    8/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks