Overview

overview

8

Static

static

dae1b4d591...ea.exe

windows7-x64

8

dae1b4d591...ea.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dae1b4d591e82fe6843ed614c4e145f6e9e025ea

  • Size

    855KB

  • Sample

    230114-p63c9sff96

  • MD5

    b5e2309c1fb693b96a758b2f0c687025

  • SHA1

    dae1b4d591e82fe6843ed614c4e145f6e9e025ea

  • SHA256

    5ddfbe705b0cb87c996a1ebc61a337e8b5d187860c54c839cecf72a31ee375df

  • SHA512

    a4d61bff82de26552a15d1456c9497c89d602fb67b51504d03bdae690a9ca7d896e0100e28925066d905e036303c219428458d4ee5d1a7beab571e8b00787852

  • SSDEEP

    24576:mY3rsNBOP13rqq8gMXxmxUfrFlTOG0uN+qzqmt:73rs+t3rqLgMB/Oc5zqmt

Score
8/10
spywarestealer

Malware Config

Targets

    • Target

      dae1b4d591e82fe6843ed614c4e145f6e9e025ea

    • Size

      855KB

    • MD5

      b5e2309c1fb693b96a758b2f0c687025

    • SHA1

      dae1b4d591e82fe6843ed614c4e145f6e9e025ea

    • SHA256

      5ddfbe705b0cb87c996a1ebc61a337e8b5d187860c54c839cecf72a31ee375df

    • SHA512

      a4d61bff82de26552a15d1456c9497c89d602fb67b51504d03bdae690a9ca7d896e0100e28925066d905e036303c219428458d4ee5d1a7beab571e8b00787852

    • SSDEEP

      24576:mY3rsNBOP13rqq8gMXxmxUfrFlTOG0uN+qzqmt:73rs+t3rqLgMB/Oc5zqmt

    Score
    8/10
    spywarestealer

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks