Overview

overview

8

Static

static

1

program_chrome.exe

windows7-x64

8

program_chrome.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    program_chrome.exe

  • Size

    1.3MB

  • Sample

    230614-kav7vsfb2z

  • MD5

    d60e2fc0a9b178e58f33426f6acab719

  • SHA1

    be421accd73d9fe652d380e5db6bd8a9b11a1f22

  • SHA256

    563b2af0d715d08882412d1d21e5523b8f9a51238892cb8be44d81f9349956ab

  • SHA512

    3e0feeee26b92f4350d5c1f85943506746312aa6a696e9cd7ffd1b7222503c905455bb43287c032bfc58fb7aae9f0cdd494ff929783c17e948e3481806d63dcf

  • SSDEEP

    24576:Dsqo3GCcmejbTNeAcPjy0737/yxGGh39RJ5S4r5UzhCOSqL4gf:Do3GnmefTNeDe0737RM3fDruVeWDf

Score
8/10
discoverypersistencespywarestealer

Malware Config

Targets

    • Target

      program_chrome.exe

    • Size

      1.3MB

    • MD5

      d60e2fc0a9b178e58f33426f6acab719

    • SHA1

      be421accd73d9fe652d380e5db6bd8a9b11a1f22

    • SHA256

      563b2af0d715d08882412d1d21e5523b8f9a51238892cb8be44d81f9349956ab

    • SHA512

      3e0feeee26b92f4350d5c1f85943506746312aa6a696e9cd7ffd1b7222503c905455bb43287c032bfc58fb7aae9f0cdd494ff929783c17e948e3481806d63dcf

    • SSDEEP

      24576:Dsqo3GCcmejbTNeAcPjy0737/yxGGh39RJ5S4r5UzhCOSqL4gf:Do3GnmefTNeDe0737RM3fDruVeWDf

    Score
    8/10
    discoverypersistencespywarestealer

    • Downloads MZ/PE file

    • Modifies Installed Components in the registry

      persistence

    • Sets file execution options in registry

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks