Overview

overview

7

Static

static

d28db1e482...ac.exe

windows7-x64

7

d28db1e482...ac.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d28db1e482563327a0768a5522093b48942b0da50bb33f5b0f47aedae39a45ac

  • Size

    255KB

  • Sample

    221207-c6xfssgg74

  • MD5

    736fb1534d0d0eba105f208be7c0c805

  • SHA1

    ee213ca53864097d9d560d297d7d95aaadf65f25

  • SHA256

    d28db1e482563327a0768a5522093b48942b0da50bb33f5b0f47aedae39a45ac

  • SHA512

    8cd5404df35e47cdf53d652f6c73020c4dcfa3ecb42581d7ae1a05e505693d8c29c020a3013503c05b865b59ccb42c1369e0f69e907d65e2d543884e0cf2222c

  • SSDEEP

    768:h3FRpBWElrAabizx/1G53dyg2/6cDJx4qf+NlbqW5z53ZSraRqtD+4Q8+AULv:h3FAs+8yqbt2aRqBzw

Score
7/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      d28db1e482563327a0768a5522093b48942b0da50bb33f5b0f47aedae39a45ac

    • Size

      255KB

    • MD5

      736fb1534d0d0eba105f208be7c0c805

    • SHA1

      ee213ca53864097d9d560d297d7d95aaadf65f25

    • SHA256

      d28db1e482563327a0768a5522093b48942b0da50bb33f5b0f47aedae39a45ac

    • SHA512

      8cd5404df35e47cdf53d652f6c73020c4dcfa3ecb42581d7ae1a05e505693d8c29c020a3013503c05b865b59ccb42c1369e0f69e907d65e2d543884e0cf2222c

    • SSDEEP

      768:h3FRpBWElrAabizx/1G53dyg2/6cDJx4qf+NlbqW5z53ZSraRqtD+4Q8+AULv:h3FAs+8yqbt2aRqBzw

    Score
    7/10
    discoveryspywarestealer

    • Reads data files stored by FTP clients

      Tries to access configuration files associated with programs like FileZilla.

      spywarestealer

    • Reads local data of messenger clients

      Infostealers often target stored data of messaging applications, which can include saved credentials and account information.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks