Overview

overview

8

Static

static

1

fadbd6301e...a0.exe

windows7-x64

8

fadbd6301e...a0.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    fadbd6301e7fd5e1a3500fe209f3fd2c0756b80a7f13583527319ea364f0c3a0

  • Size

    184KB

  • Sample

    221206-scksxagg57

  • MD5

    938508b01d059048fe2f73c9e01ab43f

  • SHA1

    765c836a10e5e76be7f8c8b3fcd2312f87fe52ee

  • SHA256

    fadbd6301e7fd5e1a3500fe209f3fd2c0756b80a7f13583527319ea364f0c3a0

  • SHA512

    52289edea1e934ec7e82541071b629d87f93bf64bbff92c485b1d872d3cefcb475a07dfbff6d3c8319c3cec760509280e46ef801b20fff591a4880814e2396f0

  • SSDEEP

    3072:0gXdZt9P6D3XJ29TumjXMU7Q2pzFmaO7yp4tIAwuPFiOsixmUpPGbF5Z2+GM:0e34c9ymu2ppmabLchsiNoiM

Score
8/10
persistencespywarestealer

Malware Config

Targets

    • Target

      fadbd6301e7fd5e1a3500fe209f3fd2c0756b80a7f13583527319ea364f0c3a0

    • Size

      184KB

    • MD5

      938508b01d059048fe2f73c9e01ab43f

    • SHA1

      765c836a10e5e76be7f8c8b3fcd2312f87fe52ee

    • SHA256

      fadbd6301e7fd5e1a3500fe209f3fd2c0756b80a7f13583527319ea364f0c3a0

    • SHA512

      52289edea1e934ec7e82541071b629d87f93bf64bbff92c485b1d872d3cefcb475a07dfbff6d3c8319c3cec760509280e46ef801b20fff591a4880814e2396f0

    • SSDEEP

      3072:0gXdZt9P6D3XJ29TumjXMU7Q2pzFmaO7yp4tIAwuPFiOsixmUpPGbF5Z2+GM:0e34c9ymu2ppmabLchsiNoiM

    Score
    8/10
    persistencespywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks