Overview

overview

10

Static

static

10

impvqfag.exe

windows7-x64

7

impvqfag.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    impvqfag.ex

  • Size

    168KB

  • Sample

    230326-gx5g9shf5y

  • MD5

    967461d7eaa06cceada0df6b90dc2248

  • SHA1

    9b0f168f38e990dade84905f8b294e0c83a1a93f

  • SHA256

    d6d03b39851da54f93d35a89fa243ebc01b45b6f7ed5590605d64bda89fd293d

  • SHA512

    117873b1ca7cf78f4579611f16bc5479b12a63acfec99bd3021b67de5336254337f7c9e5f8fc202dc26109ca2dd3f1e689d15e989662a5cf1dac45d1322aafff

  • SSDEEP

    3072:KDBXmfDngnSzsevIJqg5IOQI0HQFdWjhf7ybH0WRgg/:EXmfDgbGg5IOQIAhTybDgg

Score
10/10
bluefoxspywarestealer

Malware Config

Targets

    • Target

      impvqfag.ex

    • Size

      168KB

    • MD5

      967461d7eaa06cceada0df6b90dc2248

    • SHA1

      9b0f168f38e990dade84905f8b294e0c83a1a93f

    • SHA256

      d6d03b39851da54f93d35a89fa243ebc01b45b6f7ed5590605d64bda89fd293d

    • SHA512

      117873b1ca7cf78f4579611f16bc5479b12a63acfec99bd3021b67de5336254337f7c9e5f8fc202dc26109ca2dd3f1e689d15e989662a5cf1dac45d1322aafff

    • SSDEEP

      3072:KDBXmfDngnSzsevIJqg5IOQI0HQFdWjhf7ybH0WRgg/:EXmfDgbGg5IOQIAhTybDgg

    Score
    7/10
    spywarestealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks