Overview

overview

7

Static

static

ede31b64ae...65.exe

windows7-x64

7

ede31b64ae...65.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ede31b64aed331163c7fc5da1c88716be7d1c1b9b24e0d6336c2bbae4c994b65

  • Size

    1.7MB

  • Sample

    221128-rtgbdaee6s

  • MD5

    fd3b04e652b729108a9c7ab55ebe1b6c

  • SHA1

    43a15f7b9902ddf09e379ff26ef1b14f8adba322

  • SHA256

    ede31b64aed331163c7fc5da1c88716be7d1c1b9b24e0d6336c2bbae4c994b65

  • SHA512

    6c18480047d545393b527236d1260eb838f4276a865509137e11aca0781d94e8065d61f34a42e26065ff08685d728605cdf9718f6032d25ae1db4caf3041bef9

  • SSDEEP

    49152:5nqmARra0Ee/k/PlvOsXNAmpZ3d5UK3dvPNJl36d3SLANOossJks:jRFnossys

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      ede31b64aed331163c7fc5da1c88716be7d1c1b9b24e0d6336c2bbae4c994b65

    • Size

      1.7MB

    • MD5

      fd3b04e652b729108a9c7ab55ebe1b6c

    • SHA1

      43a15f7b9902ddf09e379ff26ef1b14f8adba322

    • SHA256

      ede31b64aed331163c7fc5da1c88716be7d1c1b9b24e0d6336c2bbae4c994b65

    • SHA512

      6c18480047d545393b527236d1260eb838f4276a865509137e11aca0781d94e8065d61f34a42e26065ff08685d728605cdf9718f6032d25ae1db4caf3041bef9

    • SSDEEP

      49152:5nqmARra0Ee/k/PlvOsXNAmpZ3d5UK3dvPNJl36d3SLANOossJks:jRFnossys

    Score
    7/10
    spywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks