Overview

overview

7

Static

static

3

2fcbae1ddb...5a.exe

windows7-x64

7

2fcbae1ddb...5a.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2fcbae1ddb45814101eeea404b12efaf692680af979e5d6e9acfee1b2fc6e95a

  • Size

    1.8MB

  • Sample

    230930-v4t7rsed6z

  • MD5

    35ccc2260cfd3f83cf2ffdada82e70ee

  • SHA1

    febd852308e898a7586853926401d5c27e3e8912

  • SHA256

    2fcbae1ddb45814101eeea404b12efaf692680af979e5d6e9acfee1b2fc6e95a

  • SHA512

    8bc29c15dede50699ecb88864cdbf964a6ab02e7acfa232fe38e0667ad4a620e89e0099ce122214e321b68b02cbfda2c0dce12f3c5a980a51581291e62c322ef

  • SSDEEP

    49152:oK783MoXnFv3dcj7q5LsLp3CceMuczXr5qtvW89Ombvzc05hK:oK78HXnl3dcj7q5KpyceMuczXlqRVbvj

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2fcbae1ddb45814101eeea404b12efaf692680af979e5d6e9acfee1b2fc6e95a

    • Size

      1.8MB

    • MD5

      35ccc2260cfd3f83cf2ffdada82e70ee

    • SHA1

      febd852308e898a7586853926401d5c27e3e8912

    • SHA256

      2fcbae1ddb45814101eeea404b12efaf692680af979e5d6e9acfee1b2fc6e95a

    • SHA512

      8bc29c15dede50699ecb88864cdbf964a6ab02e7acfa232fe38e0667ad4a620e89e0099ce122214e321b68b02cbfda2c0dce12f3c5a980a51581291e62c322ef

    • SSDEEP

      49152:oK783MoXnFv3dcj7q5LsLp3CceMuczXr5qtvW89Ombvzc05hK:oK78HXnl3dcj7q5KpyceMuczXlqRVbvj

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks