Overview

overview

8

Static

static

c35b67a8c6...3e.exe

windows7-x64

8

c35b67a8c6...3e.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c35b67a8c60c72d034e57a37e61716f192d1c1d5c82ad6bd0d29c8d72f9e493e

  • Size

    931KB

  • Sample

    221124-ydek6sed99

  • MD5

    87b551d9bcda315b13a6c0190544bd2b

  • SHA1

    babdae1ad4dfb63e1e8b40a3e744a3b77f43bba5

  • SHA256

    c35b67a8c60c72d034e57a37e61716f192d1c1d5c82ad6bd0d29c8d72f9e493e

  • SHA512

    22819fa9ccdd2fe06a8f14075c6f0bdd0db24d79b4c1ed93990f332a4a4a5eaec723928d6c6e3177c4f9f557658bd4cd03cf4a8c9d8019053189733030615bf0

  • SSDEEP

    24576:h1OYdaOVCZ/iWCvu/2sWsJA/jlt+DHhso:h1OszCpYO/dJJDHhso

Score
8/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      c35b67a8c60c72d034e57a37e61716f192d1c1d5c82ad6bd0d29c8d72f9e493e

    • Size

      931KB

    • MD5

      87b551d9bcda315b13a6c0190544bd2b

    • SHA1

      babdae1ad4dfb63e1e8b40a3e744a3b77f43bba5

    • SHA256

      c35b67a8c60c72d034e57a37e61716f192d1c1d5c82ad6bd0d29c8d72f9e493e

    • SHA512

      22819fa9ccdd2fe06a8f14075c6f0bdd0db24d79b4c1ed93990f332a4a4a5eaec723928d6c6e3177c4f9f557658bd4cd03cf4a8c9d8019053189733030615bf0

    • SSDEEP

      24576:h1OYdaOVCZ/iWCvu/2sWsJA/jlt+DHhso:h1OszCpYO/dJJDHhso

    Score
    8/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks