Overview

overview

8

Static

static

a34db31a1d...d2.exe

windows7-x64

8

a34db31a1d...d2.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a34db31a1d58f42cf3f181fae5aaddef2b6b020399982e6e0c8820ec1b04b0d2

  • Size

    932KB

  • Sample

    221124-z7fk1adf3y

  • MD5

    a382a7cb24844766e0f57a6f4df5594a

  • SHA1

    a5e8413d6cac8cf962c847faaffab8a8961dce69

  • SHA256

    a34db31a1d58f42cf3f181fae5aaddef2b6b020399982e6e0c8820ec1b04b0d2

  • SHA512

    42a400aa045c2a99db3d2e6ecc05887fbfaa99c14bbf142f449c25249038f1cb4f4984d030fba69baf7f6405dcaa45effb90020e8d4a96ea48ac556e65e6b736

  • SSDEEP

    24576:h1OYdaOOCZ/iWCvu/2sWsJA/jlt+DHhsX:h1OsMCpYO/dJJDHhsX

Score
8/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      a34db31a1d58f42cf3f181fae5aaddef2b6b020399982e6e0c8820ec1b04b0d2

    • Size

      932KB

    • MD5

      a382a7cb24844766e0f57a6f4df5594a

    • SHA1

      a5e8413d6cac8cf962c847faaffab8a8961dce69

    • SHA256

      a34db31a1d58f42cf3f181fae5aaddef2b6b020399982e6e0c8820ec1b04b0d2

    • SHA512

      42a400aa045c2a99db3d2e6ecc05887fbfaa99c14bbf142f449c25249038f1cb4f4984d030fba69baf7f6405dcaa45effb90020e8d4a96ea48ac556e65e6b736

    • SSDEEP

      24576:h1OYdaOOCZ/iWCvu/2sWsJA/jlt+DHhsX:h1OsMCpYO/dJJDHhsX

    Score
    8/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks