Overview

overview

8

Static

static

c1eaac2ee2...ca.exe

windows7-x64

8

c1eaac2ee2...ca.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c1eaac2ee275b35f8850fe370cf04e0cf4f3c3605d635341bac239a29a648dca

  • Size

    920KB

  • Sample

    221124-yfrzaaef42

  • MD5

    9899e4ce7fec783e63844dbf15f052dd

  • SHA1

    ef6f040e2246d87ede96f3b10083ee67d0734c9b

  • SHA256

    c1eaac2ee275b35f8850fe370cf04e0cf4f3c3605d635341bac239a29a648dca

  • SHA512

    1819281a862db521acdbe3e0d2e7b89a8b288f626ea182c528f4b6ba60251ba726a969c398856eb7187f40c71e4c9f18f5cd7715415c251224cb6e326fe3236c

  • SSDEEP

    24576:h1OYdaOgMtdHAqcdDVhYwiei7+EpFAh/kKZ:h1OspPHVmVhYwiLtKkKZ

Score
8/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      c1eaac2ee275b35f8850fe370cf04e0cf4f3c3605d635341bac239a29a648dca

    • Size

      920KB

    • MD5

      9899e4ce7fec783e63844dbf15f052dd

    • SHA1

      ef6f040e2246d87ede96f3b10083ee67d0734c9b

    • SHA256

      c1eaac2ee275b35f8850fe370cf04e0cf4f3c3605d635341bac239a29a648dca

    • SHA512

      1819281a862db521acdbe3e0d2e7b89a8b288f626ea182c528f4b6ba60251ba726a969c398856eb7187f40c71e4c9f18f5cd7715415c251224cb6e326fe3236c

    • SSDEEP

      24576:h1OYdaOgMtdHAqcdDVhYwiei7+EpFAh/kKZ:h1OspPHVmVhYwiLtKkKZ

    Score
    8/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks