Overview

overview

10

Static

static

10

impvqfag - Copy.exe

windows7-x64

7

impvqfag - Copy.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    impvqfag - Copy.zip

  • Size

    91KB

  • Sample

    230323-m468bsfb74

  • MD5

    f0f7aea9790fa0210de8516d74e9a5d8

  • SHA1

    68075565e2d5e20eab63d12a6ebfc1e357915fb6

  • SHA256

    154d12ad7038f0eb13f1824608f0786694daf0fead74ca9f24b333d1744c822d

  • SHA512

    06e9894b3b234ac90b146571a055e39f57de3a17986708c4988d95498b5becea819e0ef28117f98b18890338848eee97ca51184a65cf7b7fe8d6a2e968197c9e

  • SSDEEP

    1536:0VT5ik3N/HN4M6PgXhyC5vSAJmYBK9tLL9wAwiiy2c9zA2LPFkSJXYJYfx9XZgz2:0VTsk3N3hjvSArK3LL9BiM9zbLPZXYk1

Score
10/10
bluefoxspywarestealer

Malware Config

Targets

    • Target

      impvqfag - Copy.ex

    • Size

      168KB

    • MD5

      967461d7eaa06cceada0df6b90dc2248

    • SHA1

      9b0f168f38e990dade84905f8b294e0c83a1a93f

    • SHA256

      d6d03b39851da54f93d35a89fa243ebc01b45b6f7ed5590605d64bda89fd293d

    • SHA512

      117873b1ca7cf78f4579611f16bc5479b12a63acfec99bd3021b67de5336254337f7c9e5f8fc202dc26109ca2dd3f1e689d15e989662a5cf1dac45d1322aafff

    • SSDEEP

      3072:KDBXmfDngnSzsevIJqg5IOQI0HQFdWjhf7ybH0WRgg/:EXmfDgbGg5IOQIAhTybDgg

    Score
    7/10
    spywarestealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks