Overview

overview

8

Static

static

a49c1c9266...d4.exe

windows7-x64

8

a49c1c9266...d4.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a49c1c9266c5d0d6cb9b8937fc74d5aede85cee44f977ad2bbaf7a7d4839c7d4

  • Size

    931KB

  • Sample

    221124-z4835sad54

  • MD5

    2205a967b726403b032785fce4ad5de4

  • SHA1

    8c92832dd2ea31480f827e92f9188558430ec60c

  • SHA256

    a49c1c9266c5d0d6cb9b8937fc74d5aede85cee44f977ad2bbaf7a7d4839c7d4

  • SHA512

    a0de36c98702be63dc23cee37a96663df377c6991adf9cca6223e19f8adbf38959d2b7176938829ea0547eec43a6831e895af026a3e7e9c4f2d3fb2f9225e4a0

  • SSDEEP

    24576:h1OYdaOwCZ/iWCvu/2sWsJA/jlt+DHhs/:h1OsmCpYO/dJJDHhs/

Score
8/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      a49c1c9266c5d0d6cb9b8937fc74d5aede85cee44f977ad2bbaf7a7d4839c7d4

    • Size

      931KB

    • MD5

      2205a967b726403b032785fce4ad5de4

    • SHA1

      8c92832dd2ea31480f827e92f9188558430ec60c

    • SHA256

      a49c1c9266c5d0d6cb9b8937fc74d5aede85cee44f977ad2bbaf7a7d4839c7d4

    • SHA512

      a0de36c98702be63dc23cee37a96663df377c6991adf9cca6223e19f8adbf38959d2b7176938829ea0547eec43a6831e895af026a3e7e9c4f2d3fb2f9225e4a0

    • SSDEEP

      24576:h1OYdaOwCZ/iWCvu/2sWsJA/jlt+DHhs/:h1OsmCpYO/dJJDHhs/

    Score
    8/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks