Overview

overview

8

Static

static

c33f22a578...9c.exe

windows7-x64

8

c33f22a578...9c.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c33f22a578e76a40f4469795a0b521ab1f1adcbcfb1417516b1201bfcce1009c

  • Size

    926KB

  • Sample

    221124-ydntvaee32

  • MD5

    6c135b1355b9a8f3a95ca5436550af7a

  • SHA1

    70ac9aeafb3016a25fd7bc46fa9f47a65ec17ed5

  • SHA256

    c33f22a578e76a40f4469795a0b521ab1f1adcbcfb1417516b1201bfcce1009c

  • SHA512

    db5f9ca81d2771c21094d7cdede8464b3686944ddde5cdc0a84d86540acab5c1035e9db2ce2f34e85064207ba18842f2adbbb40f7e21f32d48a4ff91afd91f77

  • SSDEEP

    24576:h1OYdaOfnQju5vMu6qN2FctIOBYXZBai3GBlgpKLe/7rW:h1OspQjO6HHzayGBe/7rW

Score
8/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      c33f22a578e76a40f4469795a0b521ab1f1adcbcfb1417516b1201bfcce1009c

    • Size

      926KB

    • MD5

      6c135b1355b9a8f3a95ca5436550af7a

    • SHA1

      70ac9aeafb3016a25fd7bc46fa9f47a65ec17ed5

    • SHA256

      c33f22a578e76a40f4469795a0b521ab1f1adcbcfb1417516b1201bfcce1009c

    • SHA512

      db5f9ca81d2771c21094d7cdede8464b3686944ddde5cdc0a84d86540acab5c1035e9db2ce2f34e85064207ba18842f2adbbb40f7e21f32d48a4ff91afd91f77

    • SSDEEP

      24576:h1OYdaOfnQju5vMu6qN2FctIOBYXZBai3GBlgpKLe/7rW:h1OspQjO6HHzayGBe/7rW

    Score
    8/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks