Overview

overview

7

Static

static

1

file.exe

windows7-x64

7

file.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    file.exe

  • Size

    340KB

  • Sample

    230330-wcavgsdf59

  • MD5

    60cb0c27a4ed87c545725d9bfbb7ba18

  • SHA1

    9c107099a47b23b949e7f68eedb8e86047ebe212

  • SHA256

    42375ef6316e9b60df4c237e7a1defac0c72c5e7c0bcf46ffebe646c0efaf1d3

  • SHA512

    cd1a7a2e485b57e984d9ef013686ec43321cd4620b67ea3fd61649e82272dd2136742ce81f8d869b6b6c01f215375a87ac291a6d9d34a13712c77804b7e9b096

  • SSDEEP

    6144:Pg+4KojJbjMg9B6aWebM4cDDatmb0vIEPXhLxupI:POKojJt62oWdvIEPR9yI

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      file.exe

    • Size

      340KB

    • MD5

      60cb0c27a4ed87c545725d9bfbb7ba18

    • SHA1

      9c107099a47b23b949e7f68eedb8e86047ebe212

    • SHA256

      42375ef6316e9b60df4c237e7a1defac0c72c5e7c0bcf46ffebe646c0efaf1d3

    • SHA512

      cd1a7a2e485b57e984d9ef013686ec43321cd4620b67ea3fd61649e82272dd2136742ce81f8d869b6b6c01f215375a87ac291a6d9d34a13712c77804b7e9b096

    • SSDEEP

      6144:Pg+4KojJbjMg9B6aWebM4cDDatmb0vIEPXhLxupI:POKojJt62oWdvIEPR9yI

    Score
    7/10
    spywarestealer

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks