Overview

overview

7

Static

static

3

d7668dd117...c4.exe

windows7-x64

7

d7668dd117...c4.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    d7668dd1177fcf3bce59bd57b1aa05fe7ba887e96a37252075559d47ebed8cc4

  • Size

    25KB

  • Sample

    231013-hs54nshd97

  • MD5

    5f4ac5f691c51c32e4e6639de079a56c

  • SHA1

    a5e90d402bea355ceaf661b951fef3a26014fff8

  • SHA256

    d7668dd1177fcf3bce59bd57b1aa05fe7ba887e96a37252075559d47ebed8cc4

  • SHA512

    f691a07e5690d2432cd1ca2070ee22b46cc1a6bc0ffd3d9bad2195bc72c55ccceea6b86c743a2c656db0839f53b2897a4f232e7e3d046f9c6e17728e590c0a05

  • SSDEEP

    384:qc0J+vqBoLotA8oPNIrxKRQSv7QrzVVvOytGxboE9K/mKHrjpjvgGL:8Q3LotOPNSQVwVVxGKEvKHrVgGL

Score
7/10
persistencespywarestealer

Malware Config

Targets

    • Target

      d7668dd1177fcf3bce59bd57b1aa05fe7ba887e96a37252075559d47ebed8cc4

    • Size

      25KB

    • MD5

      5f4ac5f691c51c32e4e6639de079a56c

    • SHA1

      a5e90d402bea355ceaf661b951fef3a26014fff8

    • SHA256

      d7668dd1177fcf3bce59bd57b1aa05fe7ba887e96a37252075559d47ebed8cc4

    • SHA512

      f691a07e5690d2432cd1ca2070ee22b46cc1a6bc0ffd3d9bad2195bc72c55ccceea6b86c743a2c656db0839f53b2897a4f232e7e3d046f9c6e17728e590c0a05

    • SSDEEP

      384:qc0J+vqBoLotA8oPNIrxKRQSv7QrzVVvOytGxboE9K/mKHrjpjvgGL:8Q3LotOPNSQVwVVxGKEvKHrVgGL

    Score
    7/10
    persistencespywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks