Overview

overview

7

Static

static

3

loader.exe

windows7-x64

1

loader.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    loader.exe

  • Size

    60.5MB

  • Sample

    231030-s528nafg92

  • MD5

    54be63223d6a45c2a707e6d02efe454f

  • SHA1

    5b2ac72118e83bc515772780badeb982819fbad2

  • SHA256

    5c3d675481ab31dc42064566c40140dc87e9a8c933c8e9147ba8bdb2642155dc

  • SHA512

    ad1673cd04a226ff39e085022f755d6e2f24f93184a7099bbeac69774f04111a00054be621d5dfd71a5e5d427ee45aa63e0c58eac66a141cb2e122d66218a071

  • SSDEEP

    786432:VG7Qap2VNDvHzRSBQszkixA0cqmDAz2/2OkJiz6Q1RA3IEgc1F8vzh:VMbGRPzAZdGn8z2/2O6ipA39aV

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      loader.exe

    • Size

      60.5MB

    • MD5

      54be63223d6a45c2a707e6d02efe454f

    • SHA1

      5b2ac72118e83bc515772780badeb982819fbad2

    • SHA256

      5c3d675481ab31dc42064566c40140dc87e9a8c933c8e9147ba8bdb2642155dc

    • SHA512

      ad1673cd04a226ff39e085022f755d6e2f24f93184a7099bbeac69774f04111a00054be621d5dfd71a5e5d427ee45aa63e0c58eac66a141cb2e122d66218a071

    • SSDEEP

      786432:VG7Qap2VNDvHzRSBQszkixA0cqmDAz2/2OkJiz6Q1RA3IEgc1F8vzh:VMbGRPzAZdGn8z2/2O6ipA39aV

    Score
    7/10
    spywarestealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks