Overview

overview

8

Static

static

c045e92b3d...53.exe

windows7-x64

8

c045e92b3d...53.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c045e92b3d45d7828a71e9c1c183b44c22daad22d205bb8735d37c3896a9ba53

  • Size

    931KB

  • Sample

    221124-yjv54seh23

  • MD5

    4f01c9559ffd18488d85a9a69333453d

  • SHA1

    cfec193b7c6c6a0303db0b1a3351b67457388024

  • SHA256

    c045e92b3d45d7828a71e9c1c183b44c22daad22d205bb8735d37c3896a9ba53

  • SHA512

    be4e31779bc556cc0e0760f6e668494bc860f34448b38ea6c60debc891baa3731488c611215baf55e74c3adc4e22fb19b964eba12aae3543399e9e896967c194

  • SSDEEP

    24576:h1OYdaOPCZ/iWCvu/2sWsJA/jlt+DHhsn:h1Os5CpYO/dJJDHhsn

Score
8/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      c045e92b3d45d7828a71e9c1c183b44c22daad22d205bb8735d37c3896a9ba53

    • Size

      931KB

    • MD5

      4f01c9559ffd18488d85a9a69333453d

    • SHA1

      cfec193b7c6c6a0303db0b1a3351b67457388024

    • SHA256

      c045e92b3d45d7828a71e9c1c183b44c22daad22d205bb8735d37c3896a9ba53

    • SHA512

      be4e31779bc556cc0e0760f6e668494bc860f34448b38ea6c60debc891baa3731488c611215baf55e74c3adc4e22fb19b964eba12aae3543399e9e896967c194

    • SSDEEP

      24576:h1OYdaOPCZ/iWCvu/2sWsJA/jlt+DHhsn:h1Os5CpYO/dJJDHhsn

    Score
    8/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks