Overview

overview

8

Static

static

a7b50306c9...ac.exe

windows7-x64

8

a7b50306c9...ac.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a7b50306c996d87b8501e32dc399e205fc33c2ff199097ea87a09a01f470ebac

  • Size

    931KB

  • Sample

    221124-zyxg6aaa59

  • MD5

    1f217f82abbb6740d9cb2b81c8980ec3

  • SHA1

    a0cfce2ebdfe78b3ed29ce1f962a36da1fe60dab

  • SHA256

    a7b50306c996d87b8501e32dc399e205fc33c2ff199097ea87a09a01f470ebac

  • SHA512

    a0c1b70edc1c48eaab9d1f04b27e0450ec8f1a4366807d036f210d0a617f01856a00d385a2a82da223946968f601e43a7c03e6a5df1679fbebfab160ace760fa

  • SSDEEP

    24576:h1OYdaOFCZ/iWCvu/2sWsJA/jlt+DHhsN:h1OsTCpYO/dJJDHhsN

Score
8/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      a7b50306c996d87b8501e32dc399e205fc33c2ff199097ea87a09a01f470ebac

    • Size

      931KB

    • MD5

      1f217f82abbb6740d9cb2b81c8980ec3

    • SHA1

      a0cfce2ebdfe78b3ed29ce1f962a36da1fe60dab

    • SHA256

      a7b50306c996d87b8501e32dc399e205fc33c2ff199097ea87a09a01f470ebac

    • SHA512

      a0c1b70edc1c48eaab9d1f04b27e0450ec8f1a4366807d036f210d0a617f01856a00d385a2a82da223946968f601e43a7c03e6a5df1679fbebfab160ace760fa

    • SSDEEP

      24576:h1OYdaOFCZ/iWCvu/2sWsJA/jlt+DHhsN:h1OsTCpYO/dJJDHhsN

    Score
    8/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks