Overview

overview

10

Static

static

10

Image-logg...on.exe

windows7-x64

7

Image-logg...on.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Image-logger-application.exe

  • Size

    15.6MB

  • Sample

    231011-3kzl5sdh25

  • MD5

    2fa6e9c789f60d5069a6d3faecae5663

  • SHA1

    946b3a84ff707490315001caeb7db63df06e9df6

  • SHA256

    8c02638647869e6d2b6e3d26fd22c050fd63f8eb565925357901094d703f2892

  • SHA512

    c07165171a27542ceed5bd3fcf33634a916d0b5cbaa6b8cca5d68bbe4d23cac59892fcaa28ab10e53492e4dfb116b7da0f29482b541acc6227bc863373fb23a4

  • SSDEEP

    393216:wJz7B2D4RqKQETSrvJPLOqH8no7FdCH3T7:ufQD4sKQEWrhRdsT

Score
10/10
crealstealerpyinstallerspywarestealer

Malware Config

Targets

    • Target

      Image-logger-application.exe

    • Size

      15.6MB

    • MD5

      2fa6e9c789f60d5069a6d3faecae5663

    • SHA1

      946b3a84ff707490315001caeb7db63df06e9df6

    • SHA256

      8c02638647869e6d2b6e3d26fd22c050fd63f8eb565925357901094d703f2892

    • SHA512

      c07165171a27542ceed5bd3fcf33634a916d0b5cbaa6b8cca5d68bbe4d23cac59892fcaa28ab10e53492e4dfb116b7da0f29482b541acc6227bc863373fb23a4

    • SSDEEP

      393216:wJz7B2D4RqKQETSrvJPLOqH8no7FdCH3T7:ufQD4sKQEWrhRdsT

    Score
    7/10
    spywarestealer

    • Drops startup file

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks