Overview

overview

7

Static

static

3

26fff602c4...a1.exe

windows7-x64

7

26fff602c4...a1.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    26fff602c45cf488487d1e873a9b52f2ff67ef97d7bcddab4589dc0ec05c46a1

  • Size

    1.3MB

  • Sample

    231031-khnsrahe8s

  • MD5

    bb5ec6aebd28a6d3fdbc7fedff373835

  • SHA1

    077d5edf1a3d98daa9c83d241845c261f47ed17c

  • SHA256

    26fff602c45cf488487d1e873a9b52f2ff67ef97d7bcddab4589dc0ec05c46a1

  • SHA512

    80116dacbd3e69711487416ac4f6842a917bd68bca42e29e9256e3be126fcffe228ed592c6361f3a59346c478459cc1707253eb16a3939c0591ab17a4bfa84a7

  • SSDEEP

    12288:zZXXc3ajG+hjQKymY8efKCpD7Gj9G6G1qT8nQkCu83L3Wl/np9DBDt3kbE:zZXsqjnhMgeiCl7G0nehbGZpbD

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      26fff602c45cf488487d1e873a9b52f2ff67ef97d7bcddab4589dc0ec05c46a1

    • Size

      1.3MB

    • MD5

      bb5ec6aebd28a6d3fdbc7fedff373835

    • SHA1

      077d5edf1a3d98daa9c83d241845c261f47ed17c

    • SHA256

      26fff602c45cf488487d1e873a9b52f2ff67ef97d7bcddab4589dc0ec05c46a1

    • SHA512

      80116dacbd3e69711487416ac4f6842a917bd68bca42e29e9256e3be126fcffe228ed592c6361f3a59346c478459cc1707253eb16a3939c0591ab17a4bfa84a7

    • SSDEEP

      12288:zZXXc3ajG+hjQKymY8efKCpD7Gj9G6G1qT8nQkCu83L3Wl/np9DBDt3kbE:zZXsqjnhMgeiCl7G0nehbGZpbD

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks