Overview

overview

8

Static

static

49699e08d0...7a.exe

windows7-x64

8

49699e08d0...7a.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    49699e08d0d0ad9cba4dd8b26101031370b90712851d2fcbc006119760b9577a

  • Size

    932KB

  • Sample

    221125-cdxabsgd6x

  • MD5

    9dd656dd0a4e87108efd3b417aa41ebe

  • SHA1

    4c1141974a7c00873e9b0e90b43b5a7802b24606

  • SHA256

    49699e08d0d0ad9cba4dd8b26101031370b90712851d2fcbc006119760b9577a

  • SHA512

    4e22431bc79198d2bb4dfda870a08def1670d56924207278d04a190d524e8d0f73b766a880a22e62258c8d1d4f4b28addd04cd497321ee134e3031048b900743

  • SSDEEP

    24576:h1OYdaOqCZ/iWCvu/2sWsJA/jlt+DHhs/:h1Os4CpYO/dJJDHhs/

Score
8/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      49699e08d0d0ad9cba4dd8b26101031370b90712851d2fcbc006119760b9577a

    • Size

      932KB

    • MD5

      9dd656dd0a4e87108efd3b417aa41ebe

    • SHA1

      4c1141974a7c00873e9b0e90b43b5a7802b24606

    • SHA256

      49699e08d0d0ad9cba4dd8b26101031370b90712851d2fcbc006119760b9577a

    • SHA512

      4e22431bc79198d2bb4dfda870a08def1670d56924207278d04a190d524e8d0f73b766a880a22e62258c8d1d4f4b28addd04cd497321ee134e3031048b900743

    • SSDEEP

      24576:h1OYdaOqCZ/iWCvu/2sWsJA/jlt+DHhs/:h1Os4CpYO/dJJDHhs/

    Score
    8/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks