Overview

overview

8

Static

static

3

2379723159...cc.exe

windows7-x64

8

2379723159...cc.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    72ceccc9998a49d984bf8648262304f5.bin

  • Size

    144KB

  • Sample

    230606-bszhkabe27

  • MD5

    7fb6ce1bafd59d967fb9465b579520ec

  • SHA1

    490efa80c1d923e3635b1790b385fa3a635e9909

  • SHA256

    269dd60c86bd1247744b1c0654e90fbc0869ea9a84dc883d5783ff947bc6d0b3

  • SHA512

    479cd444c0c96628b2ff9475202ca9cade732357773f013a877d99b6d474028016a31d73295a2ed6bd88d1347fe9700c7430c12e8ab1245e33b29886a0f0dab8

  • SSDEEP

    3072:tuig8Mts71Rt8gTl+THg3a0y/r9rbUElOlyNFhpFm0a+yfAOKIIqW0p:tc8MtK1sgT2F0y/JbUqXhp0MOKIIqPp

Score
8/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      2379723159ed6b1301813d5e06ae76370cb218b7f3b50c4bd4306db1682f2ccc.exe

    • Size

      260KB

    • MD5

      72ceccc9998a49d984bf8648262304f5

    • SHA1

      3c37827070f8d4eb726f59a0d4f2db0d8f1232ca

    • SHA256

      2379723159ed6b1301813d5e06ae76370cb218b7f3b50c4bd4306db1682f2ccc

    • SHA512

      f7cc1322e1132bd07290ea494d70fc9f358c7f7e6667656122e5dde93b236a968c97446e8003add8055122847e633e8a4d86bb33d44c3cce9ca71c8a1083bb74

    • SSDEEP

      3072:x6sSW20yS19d7Y5fLagUTxegZtSR/E4jOC:QsSWZ19d7Y55UTx7Zta/

    Score
    8/10
    discoveryspywarestealer

    • Downloads MZ/PE file

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks