Overview

overview

7

Static

static

3

4b547a56d3...bf.exe

windows7-x64

7

4b547a56d3...bf.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    4b547a56d3af3019379d443d20459c0a66dcba0ffadf21b20f3a1d0e30c6dcbf

  • Size

    25KB

  • Sample

    230816-qnfxzsch5x

  • MD5

    af7b96ceceee3a10eeb93700a076d5dd

  • SHA1

    db57428580f012739458f838ae6a505b6854294f

  • SHA256

    4b547a56d3af3019379d443d20459c0a66dcba0ffadf21b20f3a1d0e30c6dcbf

  • SHA512

    c8d0d4dfe588e81ba1330d1394c89583cfaf0f1814b433e9a8bd3318fa8e4316d90af39f03883cac6d66e6250d00f905657bc0708968d87a807495c6a6c7a9e4

  • SSDEEP

    384:qc0J+vqBoLotA8oPNIrxKRQSv7QrzVVvOytGxboE9K/mKHrjpjvd:8Q3LotOPNSQVwVVxGKEvKHrVd

Score
7/10
persistencespywarestealer

Malware Config

Targets

    • Target

      4b547a56d3af3019379d443d20459c0a66dcba0ffadf21b20f3a1d0e30c6dcbf

    • Size

      25KB

    • MD5

      af7b96ceceee3a10eeb93700a076d5dd

    • SHA1

      db57428580f012739458f838ae6a505b6854294f

    • SHA256

      4b547a56d3af3019379d443d20459c0a66dcba0ffadf21b20f3a1d0e30c6dcbf

    • SHA512

      c8d0d4dfe588e81ba1330d1394c89583cfaf0f1814b433e9a8bd3318fa8e4316d90af39f03883cac6d66e6250d00f905657bc0708968d87a807495c6a6c7a9e4

    • SSDEEP

      384:qc0J+vqBoLotA8oPNIrxKRQSv7QrzVVvOytGxboE9K/mKHrjpjvd:8Q3LotOPNSQVwVVxGKEvKHrVd

    Score
    7/10
    persistencespywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks