Overview

overview

7

Static

static

3

20e243b72d...16.exe

windows7-x64

7

20e243b72d...16.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    20e243b72d029a2714710d4d778bd81d3092d1f3bfac026c23f2d061a9f1ee16.exe

  • Size

    231KB

  • Sample

    231009-f6knsaaf6s

  • MD5

    537f3061191763948e92ff85e9563ae2

  • SHA1

    4be18b3e2e7bf0ea80a2e0134591b95e7a2e0e1c

  • SHA256

    20e243b72d029a2714710d4d778bd81d3092d1f3bfac026c23f2d061a9f1ee16

  • SHA512

    6aed9f908727db975f041fa0a681b94e50e0c63d3c9aae3379fa538f24236ec9141f38414f8ce67f75961859b71690debd16ac30ab082af420b4b1865eb1fe58

  • SSDEEP

    3072:4jyawuDLQjNiQjYVZMpli/siHpXauBjQQJG136Of9jirAugbY7:OwKJXawEQJG13F9j4APb4

Score
7/10
collectionspywarestealer

Malware Config

Targets

    • Target

      20e243b72d029a2714710d4d778bd81d3092d1f3bfac026c23f2d061a9f1ee16.exe

    • Size

      231KB

    • MD5

      537f3061191763948e92ff85e9563ae2

    • SHA1

      4be18b3e2e7bf0ea80a2e0134591b95e7a2e0e1c

    • SHA256

      20e243b72d029a2714710d4d778bd81d3092d1f3bfac026c23f2d061a9f1ee16

    • SHA512

      6aed9f908727db975f041fa0a681b94e50e0c63d3c9aae3379fa538f24236ec9141f38414f8ce67f75961859b71690debd16ac30ab082af420b4b1865eb1fe58

    • SSDEEP

      3072:4jyawuDLQjNiQjYVZMpli/siHpXauBjQQJG136Of9jirAugbY7:OwKJXawEQJG13F9j4APb4

    Score
    7/10
    collectionspywarestealer

    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

      spywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses Microsoft Outlook profiles

      collection

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks