Overview

overview

7

Static

static

3

z.exe

windows7-x64

7

z.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    z.exe

  • Size

    7.6MB

  • Sample

    230609-31h94adg57

  • MD5

    d7218bbf533d6cd111f85b869cc4d2ca

  • SHA1

    d0fbe98287c51c06d675ddfe9a725d238294f9c1

  • SHA256

    dfa35440cfd1f31f25414561d49989f7e92d87275f2451c0132fc8398ff8e4c9

  • SHA512

    3b379409d52178758fe97a4afa2e1021f689b2a1c40f9d20000ff55bef27a5e19553479fc28718236e956c34450e16ba862b1f7d92de265087efe56ae071585b

  • SSDEEP

    196608:Eo5LSjsL+Xgi85soVm+pWM2rPnVQyGqa+z332G:EogYL+EsujpMDmvqa+zH2G

Score
7/10
discoverypyinstallerspywarestealer

Malware Config

Targets

    • Target

      z.exe

    • Size

      7.6MB

    • MD5

      d7218bbf533d6cd111f85b869cc4d2ca

    • SHA1

      d0fbe98287c51c06d675ddfe9a725d238294f9c1

    • SHA256

      dfa35440cfd1f31f25414561d49989f7e92d87275f2451c0132fc8398ff8e4c9

    • SHA512

      3b379409d52178758fe97a4afa2e1021f689b2a1c40f9d20000ff55bef27a5e19553479fc28718236e956c34450e16ba862b1f7d92de265087efe56ae071585b

    • SSDEEP

      196608:Eo5LSjsL+Xgi85soVm+pWM2rPnVQyGqa+z332G:EogYL+EsujpMDmvqa+zH2G

    Score
    7/10
    discoveryspywarestealer

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks