Overview

overview

7

Static

static

3

1696939967...55.exe

windows7-x64

7

1696939967...55.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    1696939967b6fedeb1f4201730070ad55437d5f34220b42ab4294f0321d59ef43c8a32a139755.dat-decoded

  • Size

    236KB

  • Sample

    231010-pe1qcsfc97

  • MD5

    f1a1542bbccea9a4e6746040d85eae1b

  • SHA1

    4228490368ab757541d8d9550777b2e0fdec19d2

  • SHA256

    0ee09ee5a382f01dfb53c94676b9c5676b1b82be91f46b6a2ffc1996c321a994

  • SHA512

    d6f647c6634fc6537af9948180ca479617b27c1c73a24ef7e35fbc379b909519c819d2dd15318aa2abaaa030a77f392c14342a3f2a1a1c765b04b3475eb9098c

  • SSDEEP

    3072:ZoH9Y+yP0I5lFmzqkmkeuASUnmj+582C33RXld:ZodY+yP0IXFmfvg2F33h

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      1696939967b6fedeb1f4201730070ad55437d5f34220b42ab4294f0321d59ef43c8a32a139755.dat-decoded

    • Size

      236KB

    • MD5

      f1a1542bbccea9a4e6746040d85eae1b

    • SHA1

      4228490368ab757541d8d9550777b2e0fdec19d2

    • SHA256

      0ee09ee5a382f01dfb53c94676b9c5676b1b82be91f46b6a2ffc1996c321a994

    • SHA512

      d6f647c6634fc6537af9948180ca479617b27c1c73a24ef7e35fbc379b909519c819d2dd15318aa2abaaa030a77f392c14342a3f2a1a1c765b04b3475eb9098c

    • SSDEEP

      3072:ZoH9Y+yP0I5lFmzqkmkeuASUnmj+582C33RXld:ZodY+yP0IXFmfvg2F33h

    Score
    7/10
    spywarestealer

    • Reads data files stored by FTP clients

      Tries to access configuration files associated with programs like FileZilla.

      spywarestealer

    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

      spywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks