Overview

overview

7

Static

static

3

679861b4ce...bb.exe

windows7-x64

7

679861b4ce...bb.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    679861b4ceccae66a3594f1264896fea98f0e1a9a60a90140d04d1aabe7023bb

  • Size

    25KB

  • Sample

    231005-3tkvcaaa52

  • MD5

    abb2f94a26135a8f8adf91c3b32888c0

  • SHA1

    8d8d47341fa2f8ac67d0b0fe4990fdfd94e34cf1

  • SHA256

    679861b4ceccae66a3594f1264896fea98f0e1a9a60a90140d04d1aabe7023bb

  • SHA512

    433e2e9f0ca0d9dabb547af4926c757d8ad0815574fa2b3dd4f4aa79d239e9fe2b725cd42577a8d78f4097513f4bb1a0e1dcabded27b1a7aba72ec71a882d81a

  • SSDEEP

    384:qc0J+vqBoLotA8oPNIrxKRQSv7QrzVVvOytGxboE9K/mKHrjpjvtE:8Q3LotOPNSQVwVVxGKEvKHrVq

Score
7/10
persistencespywarestealer

Malware Config

Targets

    • Target

      679861b4ceccae66a3594f1264896fea98f0e1a9a60a90140d04d1aabe7023bb

    • Size

      25KB

    • MD5

      abb2f94a26135a8f8adf91c3b32888c0

    • SHA1

      8d8d47341fa2f8ac67d0b0fe4990fdfd94e34cf1

    • SHA256

      679861b4ceccae66a3594f1264896fea98f0e1a9a60a90140d04d1aabe7023bb

    • SHA512

      433e2e9f0ca0d9dabb547af4926c757d8ad0815574fa2b3dd4f4aa79d239e9fe2b725cd42577a8d78f4097513f4bb1a0e1dcabded27b1a7aba72ec71a882d81a

    • SSDEEP

      384:qc0J+vqBoLotA8oPNIrxKRQSv7QrzVVvOytGxboE9K/mKHrjpjvtE:8Q3LotOPNSQVwVVxGKEvKHrVq

    Score
    7/10
    persistencespywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks