Overview

overview

8

Static

static

c3a96a1136...32.exe

windows7-x64

8

c3a96a1136...32.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c3a96a11360074a7240cb211d78a55d2c8047230bf440cb207aaf0cbf342a232

  • Size

    920KB

  • Sample

    221124-ychlfaed59

  • MD5

    a30e7759b4f4b41e5375e3ebe6918c9b

  • SHA1

    712073247490f4c514d494b8abfb0318640403ef

  • SHA256

    c3a96a11360074a7240cb211d78a55d2c8047230bf440cb207aaf0cbf342a232

  • SHA512

    908810e2d4970b8440b07ca8129e12fa32b58e5822b4513917f5202b0e51d70effe9c5aba9367a393d3381fe89d8a8a4aeeac2f73b2ec556ae99da16e303ee4f

  • SSDEEP

    24576:h1OYdaO/MtdHAqcdDVhYwiei7+EpFAh/kKc:h1OsePHVmVhYwiLtKkKc

Score
8/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      c3a96a11360074a7240cb211d78a55d2c8047230bf440cb207aaf0cbf342a232

    • Size

      920KB

    • MD5

      a30e7759b4f4b41e5375e3ebe6918c9b

    • SHA1

      712073247490f4c514d494b8abfb0318640403ef

    • SHA256

      c3a96a11360074a7240cb211d78a55d2c8047230bf440cb207aaf0cbf342a232

    • SHA512

      908810e2d4970b8440b07ca8129e12fa32b58e5822b4513917f5202b0e51d70effe9c5aba9367a393d3381fe89d8a8a4aeeac2f73b2ec556ae99da16e303ee4f

    • SSDEEP

      24576:h1OYdaO/MtdHAqcdDVhYwiei7+EpFAh/kKc:h1OsePHVmVhYwiLtKkKc

    Score
    8/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks