Overview

overview

7

Static

static

1

158b93438a...f7.exe

windows7-x64

7

158b93438a...f7.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    158b93438a8d54328fef3c117bb59ef7

  • Size

    5.5MB

  • Sample

    231225-lyv3facbg3

  • MD5

    158b93438a8d54328fef3c117bb59ef7

  • SHA1

    aa24e314910adf064dff33b5106a6dd009e90c45

  • SHA256

    179b4678a221ac2bb5059260512515eec9dd7a825287d3f71376b67371fa367b

  • SHA512

    30b016d84ff1be67fd15a4cd66b2dec24713507f197a6e0b93dad5c9ff13be6701d4d46162cd0c085e641b5b2a83e42901bd907304fcb4f60bc96465a5c86360

  • SSDEEP

    98304:prCupviDxaPqmbS5jR5sG6wKEU/1QoNMvCvzCC2bd6vO6W0GUEcqmdw8yPITd50I:prFpaEPdAN5UpFtlNMv22CCdJEEcqZ8P

Score
7/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      158b93438a8d54328fef3c117bb59ef7

    • Size

      5.5MB

    • MD5

      158b93438a8d54328fef3c117bb59ef7

    • SHA1

      aa24e314910adf064dff33b5106a6dd009e90c45

    • SHA256

      179b4678a221ac2bb5059260512515eec9dd7a825287d3f71376b67371fa367b

    • SHA512

      30b016d84ff1be67fd15a4cd66b2dec24713507f197a6e0b93dad5c9ff13be6701d4d46162cd0c085e641b5b2a83e42901bd907304fcb4f60bc96465a5c86360

    • SSDEEP

      98304:prCupviDxaPqmbS5jR5sG6wKEU/1QoNMvCvzCC2bd6vO6W0GUEcqmdw8yPITd50I:prFpaEPdAN5UpFtlNMv22CCdJEEcqZ8P

    Score
    7/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks for any installed AV software in registry

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks