Overview

overview

8

Static

static

d41fa6374d...00.exe

windows7-x64

8

d41fa6374d...00.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d41fa6374d3e646da6b283b23a68668844b8fc78fd016284f9767f9948545100

  • Size

    200KB

  • Sample

    221206-sbxfbabg6v

  • MD5

    a7877de54fccebc5c229f29597ac22ca

  • SHA1

    170355d8a0e27457c3571c64ea1f15a6e341e54e

  • SHA256

    d41fa6374d3e646da6b283b23a68668844b8fc78fd016284f9767f9948545100

  • SHA512

    4e633a400d6bc25695b7649ced2f165e271a589af2fb98d4054bdbda6d3e832cb29b1dfbb9162d4fc9be0580c5f3cbf05817a9f1fad9c21c794be5ffa6b25c01

  • SSDEEP

    3072:v9EsajJr6awJ/q6wlywqF0q6kfQMHNE+nAW95/yl:v9EsalGng6Iqmqnfhfyl

Score
8/10
spywarestealer

Malware Config

Targets

    • Target

      d41fa6374d3e646da6b283b23a68668844b8fc78fd016284f9767f9948545100

    • Size

      200KB

    • MD5

      a7877de54fccebc5c229f29597ac22ca

    • SHA1

      170355d8a0e27457c3571c64ea1f15a6e341e54e

    • SHA256

      d41fa6374d3e646da6b283b23a68668844b8fc78fd016284f9767f9948545100

    • SHA512

      4e633a400d6bc25695b7649ced2f165e271a589af2fb98d4054bdbda6d3e832cb29b1dfbb9162d4fc9be0580c5f3cbf05817a9f1fad9c21c794be5ffa6b25c01

    • SSDEEP

      3072:v9EsajJr6awJ/q6wlywqF0q6kfQMHNE+nAW95/yl:v9EsalGng6Iqmqnfhfyl

    Score
    8/10
    spywarestealer

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks