Overview

overview

7

Static

static

3

1f900595df...c0.exe

windows7-x64

7

1f900595df...c0.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1f900595df83d537935552e78b8a46bc9065de77f9d24af4c0b5c4d25e6128c0

  • Size

    1.8MB

  • Sample

    230918-xama6sbh7y

  • MD5

    ed5812dd75176844702c4e4ba9dc78c0

  • SHA1

    981feae3ae91623a902a70e0c63e1eb46d5341b3

  • SHA256

    1f900595df83d537935552e78b8a46bc9065de77f9d24af4c0b5c4d25e6128c0

  • SHA512

    2538e8a82129b09d2cd406402827d8134b0ee3c243d71a2f5ccad50ffa83c44418e05fd86129b9a3564806c9a97919472cd73a98c26da4c89090e5b2bfb33d85

  • SSDEEP

    49152:MKcCrIFoG1PNLG6Ru+mgBv/Q2zOr6CXTe30jaNf1TWbdz:MKdrIFo2PB7R9v/gDU023W

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      1f900595df83d537935552e78b8a46bc9065de77f9d24af4c0b5c4d25e6128c0

    • Size

      1.8MB

    • MD5

      ed5812dd75176844702c4e4ba9dc78c0

    • SHA1

      981feae3ae91623a902a70e0c63e1eb46d5341b3

    • SHA256

      1f900595df83d537935552e78b8a46bc9065de77f9d24af4c0b5c4d25e6128c0

    • SHA512

      2538e8a82129b09d2cd406402827d8134b0ee3c243d71a2f5ccad50ffa83c44418e05fd86129b9a3564806c9a97919472cd73a98c26da4c89090e5b2bfb33d85

    • SSDEEP

      49152:MKcCrIFoG1PNLG6Ru+mgBv/Q2zOr6CXTe30jaNf1TWbdz:MKdrIFo2PB7R9v/gDU023W

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks