Overview

overview

7

Static

static

1

GenshinImp...43.exe

windows7-x64

7

GenshinImp...43.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    GenshinImpact_install_20230104163543.exe

  • Size

    118.4MB

  • Sample

    230206-wz8d9sfc55

  • MD5

    7c54bc2ef1e7c306e9c6af92e3e6016c

  • SHA1

    154155b98601fa93de119a66fbf8344e78adf4f1

  • SHA256

    4f9217c9c2d8e5eacff91ad74f9e59efca3897a1885941053cf586a76f076099

  • SHA512

    53b4a477d5caead029cf41d9dda73522b18dd36c809438de4b9a2fd93ef06269e58123d035ee1834b00150b0684e82e100ceb0c46cc2f84ad7fb979619c3f0ad

  • SSDEEP

    3145728:zSd8/4DaN6JzlfJIacMERP42xgmPJM09F2cf4gCSuLQZUOwIig:k5aOYaHT2xgEJMI2tQlig

Score
7/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      GenshinImpact_install_20230104163543.exe

    • Size

      118.4MB

    • MD5

      7c54bc2ef1e7c306e9c6af92e3e6016c

    • SHA1

      154155b98601fa93de119a66fbf8344e78adf4f1

    • SHA256

      4f9217c9c2d8e5eacff91ad74f9e59efca3897a1885941053cf586a76f076099

    • SHA512

      53b4a477d5caead029cf41d9dda73522b18dd36c809438de4b9a2fd93ef06269e58123d035ee1834b00150b0684e82e100ceb0c46cc2f84ad7fb979619c3f0ad

    • SSDEEP

      3145728:zSd8/4DaN6JzlfJIacMERP42xgmPJM09F2cf4gCSuLQZUOwIig:k5aOYaHT2xgEJMI2tQlig

    Score
    7/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

1
T1130

Modify Registry

1
T1112

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

3
T1012

System Information Discovery

3
T1082

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks