Overview

overview

8

Static

static

48f09b1e0d...63.exe

windows7-x64

8

48f09b1e0d...63.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    48f09b1e0d2bb32d6d6fd091ab566ddc45cdb18ceee3b3ebf7281689c21f2f63

  • Size

    931KB

  • Sample

    221125-cepa4sde35

  • MD5

    343d7be220aa427152810cf133f63a7b

  • SHA1

    5872601ee34c2310d54409c007da8ae5b8d134a7

  • SHA256

    48f09b1e0d2bb32d6d6fd091ab566ddc45cdb18ceee3b3ebf7281689c21f2f63

  • SHA512

    1b0e7a9e08aa79d57e3bad4232ac239567e6cbe13b36103eed86bbee0b949ac58bf6464a2317c2e4167f97169fab88dc1da61f1b791856d9b451f3d8b2ba25d9

  • SSDEEP

    24576:h1OYdaOJCZ/iWCvu/2sWsJA/jlt+DHhsG:h1OsnCpYO/dJJDHhsG

Score
8/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      48f09b1e0d2bb32d6d6fd091ab566ddc45cdb18ceee3b3ebf7281689c21f2f63

    • Size

      931KB

    • MD5

      343d7be220aa427152810cf133f63a7b

    • SHA1

      5872601ee34c2310d54409c007da8ae5b8d134a7

    • SHA256

      48f09b1e0d2bb32d6d6fd091ab566ddc45cdb18ceee3b3ebf7281689c21f2f63

    • SHA512

      1b0e7a9e08aa79d57e3bad4232ac239567e6cbe13b36103eed86bbee0b949ac58bf6464a2317c2e4167f97169fab88dc1da61f1b791856d9b451f3d8b2ba25d9

    • SSDEEP

      24576:h1OYdaOJCZ/iWCvu/2sWsJA/jlt+DHhsG:h1OsnCpYO/dJJDHhsG

    Score
    8/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks