Overview

overview

7

Static

static

3

17344bdc93...d1.exe

windows7-x64

7

17344bdc93...d1.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    17344bdc93af7fb2598b46d25a71d78eaeaab032a17c4a04038168a7cc9c68d1

  • Size

    25KB

  • Sample

    230823-grjzdaac69

  • MD5

    d9ce04d6640ab30d0042dc5c3cda9848

  • SHA1

    c1fe4e6c3be0f4f706930b5f7d9e4635423cb7f5

  • SHA256

    17344bdc93af7fb2598b46d25a71d78eaeaab032a17c4a04038168a7cc9c68d1

  • SHA512

    ee0e7f20906a5c3700a6ac6d94aa489502b094707d6e1145190982e1b7ebfc529614daaf9b448d9756b14abd9ddff872ce0b3958489e24f0ff71cebfa1ca1c44

  • SSDEEP

    384:qc0J+vqBoLotA8oPNIrxKRQSv7QrzVVvOytGxboE9K/mKHrjpjvEol:8Q3LotOPNSQVwVVxGKEvKHrV9l

Score
7/10
persistencespywarestealer

Malware Config

Targets

    • Target

      17344bdc93af7fb2598b46d25a71d78eaeaab032a17c4a04038168a7cc9c68d1

    • Size

      25KB

    • MD5

      d9ce04d6640ab30d0042dc5c3cda9848

    • SHA1

      c1fe4e6c3be0f4f706930b5f7d9e4635423cb7f5

    • SHA256

      17344bdc93af7fb2598b46d25a71d78eaeaab032a17c4a04038168a7cc9c68d1

    • SHA512

      ee0e7f20906a5c3700a6ac6d94aa489502b094707d6e1145190982e1b7ebfc529614daaf9b448d9756b14abd9ddff872ce0b3958489e24f0ff71cebfa1ca1c44

    • SSDEEP

      384:qc0J+vqBoLotA8oPNIrxKRQSv7QrzVVvOytGxboE9K/mKHrjpjvEol:8Q3LotOPNSQVwVVxGKEvKHrV9l

    Score
    7/10
    persistencespywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks