Overview

overview

7

Static

static

f770b32dfc...ad.exe

windows7-x64

7

f770b32dfc...ad.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f770b32dfc06531774ce80e460a41c1142c7869e4c492234479a99230b22eaad

  • Size

    330KB

  • Sample

    221203-m5q8hadg69

  • MD5

    893118e15fbb0ee7637975e8d999501f

  • SHA1

    9731f09f099dbfe3659ed672475f0f3a9d62403a

  • SHA256

    f770b32dfc06531774ce80e460a41c1142c7869e4c492234479a99230b22eaad

  • SHA512

    62c67fac8d96a1d853649a95d9c453c137bdf17feb90bd0db4639d951330c5aedcb5948a7c839185039a9f3f8ea0c45b7c94a30ef21c97db1ac9c32e11909317

  • SSDEEP

    768:cTVtEgTYbj7nNdZaDUH3PuaxyuBGPYwt7zmwXtMZjAkMXYL77AdExbdIC5nM8ET:oYTw2YfHR9YAzXHULGn3q

Score
7/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      f770b32dfc06531774ce80e460a41c1142c7869e4c492234479a99230b22eaad

    • Size

      330KB

    • MD5

      893118e15fbb0ee7637975e8d999501f

    • SHA1

      9731f09f099dbfe3659ed672475f0f3a9d62403a

    • SHA256

      f770b32dfc06531774ce80e460a41c1142c7869e4c492234479a99230b22eaad

    • SHA512

      62c67fac8d96a1d853649a95d9c453c137bdf17feb90bd0db4639d951330c5aedcb5948a7c839185039a9f3f8ea0c45b7c94a30ef21c97db1ac9c32e11909317

    • SSDEEP

      768:cTVtEgTYbj7nNdZaDUH3PuaxyuBGPYwt7zmwXtMZjAkMXYL77AdExbdIC5nM8ET:oYTw2YfHR9YAzXHULGn3q

    Score
    7/10
    discoveryspywarestealer

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Reads data files stored by FTP clients

      Tries to access configuration files associated with programs like FileZilla.

      spywarestealer

    • Reads local data of messenger clients

      Infostealers often target stored data of messaging applications, which can include saved credentials and account information.

      spywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks