38d07c5d734acebaac3e4882726bb9cee05a51ce0f85a79b303cb1e133254be1

Resubmissions

21/04/2023, 11:07

230421-m77y2aha8y7

21/04/2023, 11:02

230421-m47tvsfb777

Sharing

Copy URL Twitter E-mail

General

Target
vbc.exe
Size 479KB
Sample230421-m47tvsfb77
SHA256 38d07c5d734acebaac3e4882726bb9cee05a51ce0f85a79b303cb1e133254be1
MD5 3fcd0821cbc88bb18a7b6e053ca107fd
SHA1 66f2541ce25b96b9339bf054c7dc6d99e51f9a53
SHA512 9a26d824f0110a36539eb5eed84a7dbd08e6d7cba5a21784d98a8be15f0df348e471b920637ba12d0310bebc14626ccc5f939d410c4e965c66603566e942ecba
SSDEEP 12288:/LCVJ6dZnqKam0UgJHjiRPup0dQNCukXzdMj10aFGCeMLk:/WX6dZnqKam0UMGRPup0dQdk5+J+s
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  vbc.exe
- Size 479KB
- SHA256 38d07c5d734acebaac3e4882726bb9cee05a51ce0f85a79b303cb1e133254be1
- MD5 3fcd0821cbc88bb18a7b6e053ca107fd
- SHA1 66f2541ce25b96b9339bf054c7dc6d99e51f9a53
- SHA512 9a26d824f0110a36539eb5eed84a7dbd08e6d7cba5a21784d98a8be15f0df348e471b920637ba12d0310bebc14626ccc5f939d410c4e965c66603566e942ecba
- SSDEEP 12288:/LCVJ6dZnqKam0UgJHjiRPup0dQNCukXzdMj10aFGCeMLk:/WX6dZnqKam0UMGRPup0dQdk5+J+s
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

spyware stealer
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Uses the VBS compiler for execution
- Suspicious use of SetThreadContext
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scripting

T1064

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Scripting

T1064

Credential Access

Credentials in Files

T1081

Discovery

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Loads dropped DLL

Reads user/profile data of web browsers

Uses the VBS compiler for execution

Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks

static1

behavioral1

behavioral2