Overview

overview

8

Static

static

c40c5a7de8...da.exe

windows7-x64

8

c40c5a7de8...da.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c40c5a7de894d69a07ef2dd13b966f7fcb6f4fff6f5710206a55a2aa1ba958da

  • Size

    920KB

  • Sample

    221124-ybpclahd9x

  • MD5

    dfd73562fa26757580f27d8941ed53a5

  • SHA1

    4dd1cc0d73c647b19f197f253c23c6030f8d7d83

  • SHA256

    c40c5a7de894d69a07ef2dd13b966f7fcb6f4fff6f5710206a55a2aa1ba958da

  • SHA512

    99c710042d1437a680aacd7cfd2fa5de85b105a41cd04e324f2e9a75dcc3a5390499ff9e42aa1c5bad388c3c9fa5b7b75290187e778e93d44edf86fb35eb678c

  • SSDEEP

    24576:h1OYdaOmMtdHAqcdDVhYwiei7+EpFAh/kKK:h1Os7PHVmVhYwiLtKkKK

Score
8/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      c40c5a7de894d69a07ef2dd13b966f7fcb6f4fff6f5710206a55a2aa1ba958da

    • Size

      920KB

    • MD5

      dfd73562fa26757580f27d8941ed53a5

    • SHA1

      4dd1cc0d73c647b19f197f253c23c6030f8d7d83

    • SHA256

      c40c5a7de894d69a07ef2dd13b966f7fcb6f4fff6f5710206a55a2aa1ba958da

    • SHA512

      99c710042d1437a680aacd7cfd2fa5de85b105a41cd04e324f2e9a75dcc3a5390499ff9e42aa1c5bad388c3c9fa5b7b75290187e778e93d44edf86fb35eb678c

    • SSDEEP

      24576:h1OYdaOmMtdHAqcdDVhYwiei7+EpFAh/kKK:h1Os7PHVmVhYwiLtKkKK

    Score
    8/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks