Overview

overview

7

Static

static

7

0d01cfa2a6...e9.exe

windows7-x64

7

0d01cfa2a6...e9.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    0d01cfa2a68cb016d313cf0c5e27db62810f3967961653d6d2409dca20843ae9

  • Size

    5.5MB

  • Sample

    231016-kw7ssafa58

  • MD5

    4d96850894c928b437d86ac3812e9ec7

  • SHA1

    29ce084011b3372bda0b10015e06e102d4f1b3a5

  • SHA256

    0d01cfa2a68cb016d313cf0c5e27db62810f3967961653d6d2409dca20843ae9

  • SHA512

    528183ae9eefd73d2cee667ee0575b457104b8405cf246f02fa38948095b76dc96beaf91a84a9b8022984545672aa0f116c3dc6e770b8a66dd15ca6669934cbd

  • SSDEEP

    98304:BdNx1TyV+gqqhX6FhKyBrrf4xyl20QBqz7JAQy4O+A8ouYiUxsa:Bzx1TyMjuwzS09lFvyQAlVL

Score
7/10
spywarestealervmprotect

Malware Config

Targets

    • Target

      0d01cfa2a68cb016d313cf0c5e27db62810f3967961653d6d2409dca20843ae9

    • Size

      5.5MB

    • MD5

      4d96850894c928b437d86ac3812e9ec7

    • SHA1

      29ce084011b3372bda0b10015e06e102d4f1b3a5

    • SHA256

      0d01cfa2a68cb016d313cf0c5e27db62810f3967961653d6d2409dca20843ae9

    • SHA512

      528183ae9eefd73d2cee667ee0575b457104b8405cf246f02fa38948095b76dc96beaf91a84a9b8022984545672aa0f116c3dc6e770b8a66dd15ca6669934cbd

    • SSDEEP

      98304:BdNx1TyV+gqqhX6FhKyBrrf4xyl20QBqz7JAQy4O+A8ouYiUxsa:Bzx1TyMjuwzS09lFvyQAlVL

    Score
    7/10
    spywarestealervmprotect

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks