Overview

overview

7

Static

static

01782e5154...54.exe

windows7-x64

7

01782e5154...54.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    01782e515416bf5c1eb89575e01f9eca3cd0ff5021b0072951f13082a3764d54

  • Size

    1.7MB

  • Sample

    221128-rrvqzsed4y

  • MD5

    525b9e736cb49548881bb024f440912e

  • SHA1

    b33e1ecc33eab6c6e3612012c7b7ccbaf994c740

  • SHA256

    01782e515416bf5c1eb89575e01f9eca3cd0ff5021b0072951f13082a3764d54

  • SHA512

    f1f61d93f6c3f82968b802a86f29c53857a1cc7014ff8accb3cf0faf2d28360c777a6f6d5c5e201a73ef163685d0d621ca6363cc500fe8f1d6de3ad00e14cae4

  • SSDEEP

    49152:hnqmARra0Ee/k/PlvOsXNAmpZ3d5UK3dvPNJl36d3SLANOossJTZ:rRFnossVZ

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      01782e515416bf5c1eb89575e01f9eca3cd0ff5021b0072951f13082a3764d54

    • Size

      1.7MB

    • MD5

      525b9e736cb49548881bb024f440912e

    • SHA1

      b33e1ecc33eab6c6e3612012c7b7ccbaf994c740

    • SHA256

      01782e515416bf5c1eb89575e01f9eca3cd0ff5021b0072951f13082a3764d54

    • SHA512

      f1f61d93f6c3f82968b802a86f29c53857a1cc7014ff8accb3cf0faf2d28360c777a6f6d5c5e201a73ef163685d0d621ca6363cc500fe8f1d6de3ad00e14cae4

    • SSDEEP

      49152:hnqmARra0Ee/k/PlvOsXNAmpZ3d5UK3dvPNJl36d3SLANOossJTZ:rRFnossVZ

    Score
    7/10
    spywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks