Overview

overview

7

Static

static

e1c2da11dc...d0.exe

windows7-x64

7

e1c2da11dc...d0.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e1c2da11dcefeec6f147232f27c1183ef4bb2407845ad2c430f82433eff36bd0

  • Size

    2.2MB

  • Sample

    221125-hprrwahd55

  • MD5

    18e486bac83974ce622163fc55668f6d

  • SHA1

    9abe0d01e9675aa7c4bbb35208ab126f5413f7cd

  • SHA256

    e1c2da11dcefeec6f147232f27c1183ef4bb2407845ad2c430f82433eff36bd0

  • SHA512

    50ad446f989aa759b9a76425580587787eec15a699f914bedb7005b681ac028184c6acf37b070c0b73ac36c8d51e8b4b6d30e0f0dc7523f5e38b4600a8a78931

  • SSDEEP

    49152:rq5VrG4/9U7/CUfy9FuCJC4/Lg4tyXPCMZUpZW:mbCw9oCcGaGLLsX

Score
7/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      e1c2da11dcefeec6f147232f27c1183ef4bb2407845ad2c430f82433eff36bd0

    • Size

      2.2MB

    • MD5

      18e486bac83974ce622163fc55668f6d

    • SHA1

      9abe0d01e9675aa7c4bbb35208ab126f5413f7cd

    • SHA256

      e1c2da11dcefeec6f147232f27c1183ef4bb2407845ad2c430f82433eff36bd0

    • SHA512

      50ad446f989aa759b9a76425580587787eec15a699f914bedb7005b681ac028184c6acf37b070c0b73ac36c8d51e8b4b6d30e0f0dc7523f5e38b4600a8a78931

    • SSDEEP

      49152:rq5VrG4/9U7/CUfy9FuCJC4/Lg4tyXPCMZUpZW:mbCw9oCcGaGLLsX

    Score
    7/10
    discoveryspywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks