Overview

overview

7

Static

static

7

Setup.exe

windows7-x64

7

Setup.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    ChrоmеSеtuр_Pass_111.zip

  • Size

    22.9MB

  • Sample

    230828-rjnmpsee9v

  • MD5

    df5d60455ed8f725260b54c0c4bd90e3

  • SHA1

    0438f8cfc6106c96ee719aee28c005013effe54c

  • SHA256

    2be5a7f2eb59b670eb340bfc95f635621214afc11c743f45668dcd6c1db7a358

  • SHA512

    19dbf36a6b4b7e372b361b41d663d8f112b4b7533d87cc238e2794ec7a49dad66fd5a6144bc2dfef9e53fe97e2c4152473ad1ca3d7cffc922a70b73b0dccb5e1

  • SSDEEP

    393216:6AQukUtrxAdVFFnvzUcraI5Rue/E30ufUJMfpS4sZW9wo0SLpeYsfmEtcS0CYEzw:N1nAPFvrnHQJf0MBOW9woHLlsfzME7o

Score
7/10
spywarestealervmprotect

Malware Config

Targets

    • Target

      Setup.exe

    • Size

      783.5MB

    • MD5

      41202613791b958b9f605662c02d1890

    • SHA1

      c137efa94028e07c40c52f5061273477868f93fe

    • SHA256

      043ac26bf08ae59e4686bf2cb908b6e0ff12a6dc7a452ab57689967db1d8db72

    • SHA512

      82b929fee5f8d81a76ed1f3fbf976c78b19391ae9e565001e1ee6afd28f35e242e619d315a12e9fa0c97aa4feadf1d4c2cca4d8e6b68c1d9b9a34646a73e4b12

    • SSDEEP

      196608:IReYx0xquwgEUyUfrD1XVnQEkxeOV2vO4BEdpplHQpIjhabkqPlNU/:IR1x0EoyOFF3vzipp9Qe2DE/

    Score
    7/10
    spywarestealervmprotect

    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

      spywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks