Overview

overview

7

Static

static

3

ee2a541d2f...f4.exe

windows7-x64

7

ee2a541d2f...f4.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    ee2a541d2f339ac17bb5a1169c231e3b411d59b5e1d2610f738281623543caf4

  • Size

    25KB

  • Sample

    231012-fn1x2sah49

  • MD5

    5270cdaa40ea37f9963e1534e07f6d38

  • SHA1

    dd7c95aa8afadd462f8a16256f533fe7ef7b5bac

  • SHA256

    ee2a541d2f339ac17bb5a1169c231e3b411d59b5e1d2610f738281623543caf4

  • SHA512

    2054988ceefb11bfe995ed53188f14548b2521435c07c481944b9c0a067e9ef2e4e1f778ac7dd3b446e93d2fdf169ec13d1e2d2d1d9bc9fccdef85f5d8ead94a

  • SSDEEP

    384:qc0J+vqBoLotA8oPNIrxKRQSv7QrzVVvOytGxboE9K/mKHrjpjvR:8Q3LotOPNSQVwVVxGKEvKHrVR

Score
7/10
persistencespywarestealer

Malware Config

Targets

    • Target

      ee2a541d2f339ac17bb5a1169c231e3b411d59b5e1d2610f738281623543caf4

    • Size

      25KB

    • MD5

      5270cdaa40ea37f9963e1534e07f6d38

    • SHA1

      dd7c95aa8afadd462f8a16256f533fe7ef7b5bac

    • SHA256

      ee2a541d2f339ac17bb5a1169c231e3b411d59b5e1d2610f738281623543caf4

    • SHA512

      2054988ceefb11bfe995ed53188f14548b2521435c07c481944b9c0a067e9ef2e4e1f778ac7dd3b446e93d2fdf169ec13d1e2d2d1d9bc9fccdef85f5d8ead94a

    • SSDEEP

      384:qc0J+vqBoLotA8oPNIrxKRQSv7QrzVVvOytGxboE9K/mKHrjpjvR:8Q3LotOPNSQVwVVxGKEvKHrVR

    Score
    7/10
    persistencespywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks