Overview

overview

7

Static

static

3

f1b9c12ad2...b4.exe

windows7-x64

7

f1b9c12ad2...b4.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    f1b9c12ad27ebd595d6e29598addd8972bb56143249eb64ac02417428f24f4b4

  • Size

    1.8MB

  • Sample

    231123-adgtjafb87

  • MD5

    ee8b76dcbff5f6f410a406093e925c10

  • SHA1

    39e1764a8d541a725faf9c3e03eb79cd7330485b

  • SHA256

    f1b9c12ad27ebd595d6e29598addd8972bb56143249eb64ac02417428f24f4b4

  • SHA512

    da305656074ae89bd4426ce6dd1dadbf47f08ec7152bc1cd4ec63296b8b49f2670a3b0bbb62ac47787b8bc045c886a0b69c0d62fff121e1f7fd3457d2e5c466b

  • SSDEEP

    49152:Nx5SUW/cxUitIGLsF0nb+tJVYleAMz77+WAEaCtFd603n2kBl/9u:NvbjVkjjCAzJZasFdPm21u

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      f1b9c12ad27ebd595d6e29598addd8972bb56143249eb64ac02417428f24f4b4

    • Size

      1.8MB

    • MD5

      ee8b76dcbff5f6f410a406093e925c10

    • SHA1

      39e1764a8d541a725faf9c3e03eb79cd7330485b

    • SHA256

      f1b9c12ad27ebd595d6e29598addd8972bb56143249eb64ac02417428f24f4b4

    • SHA512

      da305656074ae89bd4426ce6dd1dadbf47f08ec7152bc1cd4ec63296b8b49f2670a3b0bbb62ac47787b8bc045c886a0b69c0d62fff121e1f7fd3457d2e5c466b

    • SSDEEP

      49152:Nx5SUW/cxUitIGLsF0nb+tJVYleAMz77+WAEaCtFd603n2kBl/9u:NvbjVkjjCAzJZasFdPm21u

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks