Overview

overview

7

Static

static

3

b5f11e9a19...57.exe

windows7-x64

7

b5f11e9a19...57.exe

windows10-2004-x64

7

Resubmissions

22-11-2023 15:38

231122-s2555sea5v 3

10-08-2023 01:16

230810-bnacwaac7y 7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b5f11e9a19a7972bb65d5c46664a7f7594a946b3bdd9760697fd39f6d607b557

  • Size

    137KB

  • Sample

    230810-bnacwaac7y

  • MD5

    a2b20120a92c3de445b0b384a494ed39

  • SHA1

    f82093aa3c483dca6ace0f5c8dec104800b8d494

  • SHA256

    b5f11e9a19a7972bb65d5c46664a7f7594a946b3bdd9760697fd39f6d607b557

  • SHA512

    5d6389e60866cef23a8d28e586668c10c20a9009ef7e5310ebdabcead71e9628f01e0b86475664c621a29e1ef9b6f7fa07f7f0f703e425c4a7c9cc7bae2e2a6b

  • SSDEEP

    3072:etcVk+DTEMRxbE8Zcs5t3uwcELzfIZmuf2Oh4SrUq8CA:TPDTE053uwcELzfIZmuf2Oh4SrUq

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      b5f11e9a19a7972bb65d5c46664a7f7594a946b3bdd9760697fd39f6d607b557

    • Size

      137KB

    • MD5

      a2b20120a92c3de445b0b384a494ed39

    • SHA1

      f82093aa3c483dca6ace0f5c8dec104800b8d494

    • SHA256

      b5f11e9a19a7972bb65d5c46664a7f7594a946b3bdd9760697fd39f6d607b557

    • SHA512

      5d6389e60866cef23a8d28e586668c10c20a9009ef7e5310ebdabcead71e9628f01e0b86475664c621a29e1ef9b6f7fa07f7f0f703e425c4a7c9cc7bae2e2a6b

    • SSDEEP

      3072:etcVk+DTEMRxbE8Zcs5t3uwcELzfIZmuf2Oh4SrUq8CA:TPDTE053uwcELzfIZmuf2Oh4SrUq

    Score
    7/10
    spywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

1
T1553

Install Root Certificate

1
T1553.004

Modify Registry

1
T1112

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks