Overview

overview

7

Static

static

3

d60c6976c5...4a.exe

windows7-x64

7

d60c6976c5...4a.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    d60c6976c5cd665174dcaf1b22a4b22969fe1368cca6ea9f090855bfdaf3ff4a

  • Size

    25KB

  • Sample

    230930-x11aqaeh7z

  • MD5

    da056039815405dd93ec5c0d2d0adfcb

  • SHA1

    7d0e609f4e6212c28234c707401086ba9ed2fa3c

  • SHA256

    d60c6976c5cd665174dcaf1b22a4b22969fe1368cca6ea9f090855bfdaf3ff4a

  • SHA512

    aa14e6725fb2a492003924c9687ca2fa4e4df42a5f881dbcdb6355e6871956154e2d32c8d496a7dba54685ad2efe3d5076df1a7255b3797dbfae2e307251f85c

  • SSDEEP

    384:qc0J+vqBoLotA8oPNIrxKRQSv7QrzVVvOytGxboE9K/mKHrjpjv9:8Q3LotOPNSQVwVVxGKEvKHrV9

Score
7/10
persistencespywarestealer

Malware Config

Targets

    • Target

      d60c6976c5cd665174dcaf1b22a4b22969fe1368cca6ea9f090855bfdaf3ff4a

    • Size

      25KB

    • MD5

      da056039815405dd93ec5c0d2d0adfcb

    • SHA1

      7d0e609f4e6212c28234c707401086ba9ed2fa3c

    • SHA256

      d60c6976c5cd665174dcaf1b22a4b22969fe1368cca6ea9f090855bfdaf3ff4a

    • SHA512

      aa14e6725fb2a492003924c9687ca2fa4e4df42a5f881dbcdb6355e6871956154e2d32c8d496a7dba54685ad2efe3d5076df1a7255b3797dbfae2e307251f85c

    • SSDEEP

      384:qc0J+vqBoLotA8oPNIrxKRQSv7QrzVVvOytGxboE9K/mKHrjpjv9:8Q3LotOPNSQVwVVxGKEvKHrV9

    Score
    7/10
    persistencespywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks