Overview

overview

7

Static

static

3

d8268bed75...JC.exe

windows7-x64

7

d8268bed75...JC.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    d8268bed755a9098351b3acfbfca2096882c89ae5517621d34580b4de8ee6120_JC.exe

  • Size

    242KB

  • Sample

    231010-wxbmhsfe5z

  • MD5

    1e22cd428f5baf23877a8189469ed92a

  • SHA1

    812742508196a87627572282c77160a50beee5fc

  • SHA256

    d8268bed755a9098351b3acfbfca2096882c89ae5517621d34580b4de8ee6120

  • SHA512

    f15810271ef0149350f5541b97bf60910c6670f82239eba8b007ada232baef926fec79fa70a5dee56229a728e847d6a6c6d00aaf06c93eddd4c567430991507c

  • SSDEEP

    6144:dXhIAdKv3nffEoUtSBz3WR3RZ/D6A+w8:5wv3nffVUtSBa/D6

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      d8268bed755a9098351b3acfbfca2096882c89ae5517621d34580b4de8ee6120_JC.exe

    • Size

      242KB

    • MD5

      1e22cd428f5baf23877a8189469ed92a

    • SHA1

      812742508196a87627572282c77160a50beee5fc

    • SHA256

      d8268bed755a9098351b3acfbfca2096882c89ae5517621d34580b4de8ee6120

    • SHA512

      f15810271ef0149350f5541b97bf60910c6670f82239eba8b007ada232baef926fec79fa70a5dee56229a728e847d6a6c6d00aaf06c93eddd4c567430991507c

    • SSDEEP

      6144:dXhIAdKv3nffEoUtSBz3WR3RZ/D6A+w8:5wv3nffVUtSBa/D6

    Score
    7/10
    spywarestealer

    • Reads data files stored by FTP clients

      Tries to access configuration files associated with programs like FileZilla.

      spywarestealer

    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

      spywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks