Overview

overview

8

Static

static

47f71a937d...dc.exe

windows7-x64

8

47f71a937d...dc.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    47f71a937d27a7825138b746f5c2365f7206c5bc2371937b29b69522dc2379dc

  • Size

    920KB

  • Sample

    221125-cf8fdadf27

  • MD5

    88cbe8ac8cb0471148a0fcf40fdc39ae

  • SHA1

    3b1c7a897698ade5a59874dbdcda1e77330eb395

  • SHA256

    47f71a937d27a7825138b746f5c2365f7206c5bc2371937b29b69522dc2379dc

  • SHA512

    aedb62a11f39b702a2d17d3636ddf6e9b49dd8ddee0c80120c8c4bbba4856705058c1034c1e0ce4af42843becc257c133a605705273020978eecfe9ad5b4c1c1

  • SSDEEP

    24576:h1OYdaOGMtdHAqcdDVhYwiei7+EpFAh/kKb:h1OsvPHVmVhYwiLtKkKb

Score
8/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      47f71a937d27a7825138b746f5c2365f7206c5bc2371937b29b69522dc2379dc

    • Size

      920KB

    • MD5

      88cbe8ac8cb0471148a0fcf40fdc39ae

    • SHA1

      3b1c7a897698ade5a59874dbdcda1e77330eb395

    • SHA256

      47f71a937d27a7825138b746f5c2365f7206c5bc2371937b29b69522dc2379dc

    • SHA512

      aedb62a11f39b702a2d17d3636ddf6e9b49dd8ddee0c80120c8c4bbba4856705058c1034c1e0ce4af42843becc257c133a605705273020978eecfe9ad5b4c1c1

    • SSDEEP

      24576:h1OYdaOGMtdHAqcdDVhYwiei7+EpFAh/kKb:h1OsvPHVmVhYwiLtKkKb

    Score
    8/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks