Overview

overview

7

Static

static

3

a71357d94e...3a.exe

windows7-x64

7

a71357d94e...3a.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    a71357d94e405749a06f85d8422f56a4e7852b2ce28eb680d453879f60e86e3a

  • Size

    2.2MB

  • Sample

    231012-gyw8aadh22

  • MD5

    1ebe24231fdda9908d6f4a1e2f15bc8c

  • SHA1

    cf7eb06f1f8034eaebd415e430ce8c7c786104c5

  • SHA256

    a71357d94e405749a06f85d8422f56a4e7852b2ce28eb680d453879f60e86e3a

  • SHA512

    46a5018aa85867f3ef01e30507b59f8ea7cb52db8e4539f65da1742e15b85e6836dc93e081c36568443eb7b69c92a27af1c576f9fb8ee48ea2bbc283d2c7685a

  • SSDEEP

    49152:QOdtmlcm5IIpiaOlyVa/c8Xdc3G3IOz2zm3KRPGrurMlxRJ8yWFi0:zdtwqYaIOadRPMlR8yWF/

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      a71357d94e405749a06f85d8422f56a4e7852b2ce28eb680d453879f60e86e3a

    • Size

      2.2MB

    • MD5

      1ebe24231fdda9908d6f4a1e2f15bc8c

    • SHA1

      cf7eb06f1f8034eaebd415e430ce8c7c786104c5

    • SHA256

      a71357d94e405749a06f85d8422f56a4e7852b2ce28eb680d453879f60e86e3a

    • SHA512

      46a5018aa85867f3ef01e30507b59f8ea7cb52db8e4539f65da1742e15b85e6836dc93e081c36568443eb7b69c92a27af1c576f9fb8ee48ea2bbc283d2c7685a

    • SSDEEP

      49152:QOdtmlcm5IIpiaOlyVa/c8Xdc3G3IOz2zm3KRPGrurMlxRJ8yWFi0:zdtwqYaIOadRPMlR8yWF/

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks