Overview

overview

8

Static

static

a7b1789913...bc.exe

windows7-x64

8

a7b1789913...bc.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a7b178991333c249ac41af49da929d2853443561be6e62d65d3cbc6e70d00fbc

  • Size

    932KB

  • Sample

    221124-zyyefsaa63

  • MD5

    2282393a2192cbbd5efd2f743cd1bb76

  • SHA1

    685c49c84d48759556bc2b0e928e40beb65e990e

  • SHA256

    a7b178991333c249ac41af49da929d2853443561be6e62d65d3cbc6e70d00fbc

  • SHA512

    4afa0f2db5cbc087e7779b3712b3ebe98bd4c3a6f0d873fcaf40b60ae002b575791da2dedbe84683123c9ccd36a933ae5478aabf9acbed482921be86cfce7aa9

  • SSDEEP

    24576:h1OYdaOaCZ/iWCvu/2sWsJA/jlt+DHhsN:h1OswCpYO/dJJDHhsN

Score
8/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      a7b178991333c249ac41af49da929d2853443561be6e62d65d3cbc6e70d00fbc

    • Size

      932KB

    • MD5

      2282393a2192cbbd5efd2f743cd1bb76

    • SHA1

      685c49c84d48759556bc2b0e928e40beb65e990e

    • SHA256

      a7b178991333c249ac41af49da929d2853443561be6e62d65d3cbc6e70d00fbc

    • SHA512

      4afa0f2db5cbc087e7779b3712b3ebe98bd4c3a6f0d873fcaf40b60ae002b575791da2dedbe84683123c9ccd36a933ae5478aabf9acbed482921be86cfce7aa9

    • SSDEEP

      24576:h1OYdaOaCZ/iWCvu/2sWsJA/jlt+DHhsN:h1OswCpYO/dJJDHhsN

    Score
    8/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks