Overview

overview

9

Static

static

969570904d...cd.exe

windows7-x64

9

969570904d...cd.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    969570904d7099a26bb65f75921a76112f8c23eba80efd2e477188acdad4f2cd

  • Size

    867KB

  • Sample

    221201-a88kqsad75

  • MD5

    35e52a090620d2683418e2cde18d7979

  • SHA1

    7584c0ac184e8d978d76c7625589d9f3ac2aaba4

  • SHA256

    969570904d7099a26bb65f75921a76112f8c23eba80efd2e477188acdad4f2cd

  • SHA512

    32b57867eabeb4c385b87bdcc0ddcfa8688b8d513d0dcb8a2af5fa380a23038e9ce5d649305e102370df2fca94e4606802fab8aa3899e9655642894ecbe59c42

  • SSDEEP

    24576:21nOXJPgdwRW3d4Mcrg70IpQZ7f5GaYTKM5H:JXdqwM3dkrkpA7f5kn

Score
9/10
evasionpersistencespywarestealer

Malware Config

Targets

    • Target

      969570904d7099a26bb65f75921a76112f8c23eba80efd2e477188acdad4f2cd

    • Size

      867KB

    • MD5

      35e52a090620d2683418e2cde18d7979

    • SHA1

      7584c0ac184e8d978d76c7625589d9f3ac2aaba4

    • SHA256

      969570904d7099a26bb65f75921a76112f8c23eba80efd2e477188acdad4f2cd

    • SHA512

      32b57867eabeb4c385b87bdcc0ddcfa8688b8d513d0dcb8a2af5fa380a23038e9ce5d649305e102370df2fca94e4606802fab8aa3899e9655642894ecbe59c42

    • SSDEEP

      24576:21nOXJPgdwRW3d4Mcrg70IpQZ7f5GaYTKM5H:JXdqwM3dkrkpA7f5kn

    Score
    9/10
    evasionpersistencespywarestealer

    • Checks for common network interception software

      Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.

      evasion

    • Enumerates VirtualBox registry keys

      evasion

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks