Overview

overview

8

Static

static

a67b64b718...ad.exe

windows7-x64

8

a67b64b718...ad.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a67b64b7180cbdda7917b5cdc98d2f79f8ff063c5b0ae3cff0948cc9aaa445ad

  • Size

    932KB

  • Sample

    221124-z2g7msab92

  • MD5

    a364bfa155543f9204a6d6cc3a3b39a0

  • SHA1

    71e4047d691c6df6adfff1a5793259ac58999b83

  • SHA256

    a67b64b7180cbdda7917b5cdc98d2f79f8ff063c5b0ae3cff0948cc9aaa445ad

  • SHA512

    9fe17ac32c278a41ad068f1ad1388b4c5290f9950b188e5f64032a455e78e00e360de846106e1218827ee087172af4a941275b93a1bd8ea0f000d3e530dc0d6d

  • SSDEEP

    24576:h1OYdaO5vbaNvbaSCZ/iWCvu/2sWsJA/jlt+DHhsy:h1OsWCpYO/dJJDHhsy

Score
8/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      a67b64b7180cbdda7917b5cdc98d2f79f8ff063c5b0ae3cff0948cc9aaa445ad

    • Size

      932KB

    • MD5

      a364bfa155543f9204a6d6cc3a3b39a0

    • SHA1

      71e4047d691c6df6adfff1a5793259ac58999b83

    • SHA256

      a67b64b7180cbdda7917b5cdc98d2f79f8ff063c5b0ae3cff0948cc9aaa445ad

    • SHA512

      9fe17ac32c278a41ad068f1ad1388b4c5290f9950b188e5f64032a455e78e00e360de846106e1218827ee087172af4a941275b93a1bd8ea0f000d3e530dc0d6d

    • SSDEEP

      24576:h1OYdaO5vbaNvbaSCZ/iWCvu/2sWsJA/jlt+DHhsy:h1OsWCpYO/dJJDHhsy

    Score
    8/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks