Overview

overview

8

Static

static

9b18f15625...4d.exe

windows7-x64

8

9b18f15625...4d.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    9b18f1562512387010348d0e17426f36558bcc80da9c076361c9fde9b9e7f74d

  • Size

    663KB

  • Sample

    221128-gl7hgsaf58

  • MD5

    daa059477b153b22c14f47cce8a21a0f

  • SHA1

    8e49ebba3d224e9d6a1f740c8cc89f2a50b0b06b

  • SHA256

    9b18f1562512387010348d0e17426f36558bcc80da9c076361c9fde9b9e7f74d

  • SHA512

    3c297c5a02120d3b8bc6359f9a0ca3093768968bdd24e135f1155be93dbea856ccffa333a223708120db141da7e48aef09d9156c09491f2780326931caff56d9

  • SSDEEP

    12288:XqIZMiqLJJPJHwlMys/UbOSRauEicow4MaIN2DUxAZ2y8/NqwS/he4RwoYc2:XqIZGLJRits/YEuSoGZOiA9w4vv

Score
8/10
evasionpersistencespywarestealer

Malware Config

Targets

    • Target

      9b18f1562512387010348d0e17426f36558bcc80da9c076361c9fde9b9e7f74d

    • Size

      663KB

    • MD5

      daa059477b153b22c14f47cce8a21a0f

    • SHA1

      8e49ebba3d224e9d6a1f740c8cc89f2a50b0b06b

    • SHA256

      9b18f1562512387010348d0e17426f36558bcc80da9c076361c9fde9b9e7f74d

    • SHA512

      3c297c5a02120d3b8bc6359f9a0ca3093768968bdd24e135f1155be93dbea856ccffa333a223708120db141da7e48aef09d9156c09491f2780326931caff56d9

    • SSDEEP

      12288:XqIZMiqLJJPJHwlMys/UbOSRauEicow4MaIN2DUxAZ2y8/NqwS/he4RwoYc2:XqIZGLJRits/YEuSoGZOiA9w4vv

    Score
    8/10
    evasionpersistencespywarestealer

    • Executes dropped EXE

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

      evasion

    • Deletes itself

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks