Overview

overview

10

Static

static

10

RC7_cracked.exe

windows7-x64

7

RC7_cracked.exe

windows10-1703-x64

7

RC7_cracked.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    RC7_cracked.exe

  • Size

    14.3MB

  • Sample

    231119-qeenkaba2s

  • MD5

    579283ef8b916d0f52d60ae0a762374d

  • SHA1

    2a02a559aabd59234659bfd0565f3609bbe95ee7

  • SHA256

    873b1c0b0543b362897be1ccbbb04ed40065ab3aa380798d242b9854dab8c631

  • SHA512

    c39e1822dcc4fb501d03f406e0757d91795f8ebdd86cca430225cc4992f1049a583ae9dab3f6673fa734284ef91023eae731cf6b88940476d172e99ed672f79c

  • SSDEEP

    196608:8UJefPndQmRJ8dA6l10sKYu/PaQ+uqaycBIGpEqo6hTOv+QKfOJTDuEymOmhcY/m:DJYndQusl7Q+q9RoWOv+9fa2qquyYyn

Score
10/10
crealstealerpyinstallerspywarestealer

Malware Config

Targets

    • Target

      RC7_cracked.exe

    • Size

      14.3MB

    • MD5

      579283ef8b916d0f52d60ae0a762374d

    • SHA1

      2a02a559aabd59234659bfd0565f3609bbe95ee7

    • SHA256

      873b1c0b0543b362897be1ccbbb04ed40065ab3aa380798d242b9854dab8c631

    • SHA512

      c39e1822dcc4fb501d03f406e0757d91795f8ebdd86cca430225cc4992f1049a583ae9dab3f6673fa734284ef91023eae731cf6b88940476d172e99ed672f79c

    • SSDEEP

      196608:8UJefPndQmRJ8dA6l10sKYu/PaQ+uqaycBIGpEqo6hTOv+QKfOJTDuEymOmhcY/m:DJYndQusl7Q+q9RoWOv+9fa2qquyYyn

    Score
    7/10
    spywarestealer

    • Drops startup file

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2behavioral3

MITRE ATT&CK Enterprise v15

Tasks