Overview

overview

8

Static

static

470f150b8b...86.exe

windows7-x64

8

470f150b8b...86.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    470f150b8baca70bd720bcfeffc2f00cd998faeb3ae70c697ea94a417df9ee86

  • Size

    931KB

  • Sample

    221125-chs4gagf9w

  • MD5

    14065732426031014310a5f7dbf08d1b

  • SHA1

    58d87c12941dc67980d6f5e7ac3fc2000b3ccb9c

  • SHA256

    470f150b8baca70bd720bcfeffc2f00cd998faeb3ae70c697ea94a417df9ee86

  • SHA512

    19a3a169c9455e808f8a1783b79488e8cd8fb6da0a8b054bf9bef123d9692c7bb618e6c5eb5e4cf0e9ab91dd112fdc333f40277ef8f9713e34bd4afcbea8383d

  • SSDEEP

    24576:h1OYdaOeCZ/iWCvu/2sWsJA/jlt+DHhsg:h1OsQCpYO/dJJDHhsg

Score
8/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      470f150b8baca70bd720bcfeffc2f00cd998faeb3ae70c697ea94a417df9ee86

    • Size

      931KB

    • MD5

      14065732426031014310a5f7dbf08d1b

    • SHA1

      58d87c12941dc67980d6f5e7ac3fc2000b3ccb9c

    • SHA256

      470f150b8baca70bd720bcfeffc2f00cd998faeb3ae70c697ea94a417df9ee86

    • SHA512

      19a3a169c9455e808f8a1783b79488e8cd8fb6da0a8b054bf9bef123d9692c7bb618e6c5eb5e4cf0e9ab91dd112fdc333f40277ef8f9713e34bd4afcbea8383d

    • SSDEEP

      24576:h1OYdaOeCZ/iWCvu/2sWsJA/jlt+DHhsg:h1OsQCpYO/dJJDHhsg

    Score
    8/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks