Overview

overview

7

Static

static

DevSt.exe

windows7-x64

7

DevSt.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    DevSt.exe

  • Size

    2.9MB

  • Sample

    221212-psxwmaea8v

  • MD5

    97824a1a018a194220866d5548eeff95

  • SHA1

    35538496cf8c2761fc44f2d5f58882cda4d78400

  • SHA256

    07df13bc321083e74a3512b9861332e566c8d2ff201a3a5c8fcd2fd9fc8bfef6

  • SHA512

    754576ae3794dda1d9a86f87369f5cb3a4f951fbbb9e81560a8cd056e603c81a8b9ae644802a5a81d6e263608fdbd371fb9056cf8b6ea1e7e1e42b4c02e13aed

  • SSDEEP

    49152:WW32/5/uXfOGcCwXwJeAqyKWJBafsL6M8Aoek1t:UsXW3wJrq2Ld8Ai

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      DevSt.exe

    • Size

      2.9MB

    • MD5

      97824a1a018a194220866d5548eeff95

    • SHA1

      35538496cf8c2761fc44f2d5f58882cda4d78400

    • SHA256

      07df13bc321083e74a3512b9861332e566c8d2ff201a3a5c8fcd2fd9fc8bfef6

    • SHA512

      754576ae3794dda1d9a86f87369f5cb3a4f951fbbb9e81560a8cd056e603c81a8b9ae644802a5a81d6e263608fdbd371fb9056cf8b6ea1e7e1e42b4c02e13aed

    • SSDEEP

      49152:WW32/5/uXfOGcCwXwJeAqyKWJBafsL6M8Aoek1t:UsXW3wJrq2Ld8Ai

    Score
    7/10
    spywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

2
T1081

Discovery

Lateral Movement

Collection

Data from Local System

2
T1005

Exfiltration

Command and Control

Impact

Tasks