Overview

overview

7

Static

static

3

c4a98d2506...b6.exe

windows7-x64

7

c4a98d2506...b6.exe

windows10-2004-x64

4

Sharing

Copy URL Twitter E-mail

General

  • Target

    c4a98d2506c245c5a9d91ae7c0f0c39f5027c07ecf49f0503f427466c90547b6

  • Size

    1.8MB

  • Sample

    231225-pxxfnafab9

  • MD5

    8f55c4cce6a93b8cbc05b35ec0f6cd3e

  • SHA1

    3922ed3138683868befba999ca3dee44c945672d

  • SHA256

    c4a98d2506c245c5a9d91ae7c0f0c39f5027c07ecf49f0503f427466c90547b6

  • SHA512

    836cbf60c617dbed0e2dec52ec12bc0e47e979b95def862a0e68dd7a7d2b56c04571e3705b2358ddc0ea704236fb342d7f2afe333504216d45fd21ad156486c4

  • SSDEEP

    49152:vKJ0WR7AFPyyiSruXKpk3WFDL9zxnSlmYh:vKlBAFPydSS6W6X9lnum6

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      c4a98d2506c245c5a9d91ae7c0f0c39f5027c07ecf49f0503f427466c90547b6

    • Size

      1.8MB

    • MD5

      8f55c4cce6a93b8cbc05b35ec0f6cd3e

    • SHA1

      3922ed3138683868befba999ca3dee44c945672d

    • SHA256

      c4a98d2506c245c5a9d91ae7c0f0c39f5027c07ecf49f0503f427466c90547b6

    • SHA512

      836cbf60c617dbed0e2dec52ec12bc0e47e979b95def862a0e68dd7a7d2b56c04571e3705b2358ddc0ea704236fb342d7f2afe333504216d45fd21ad156486c4

    • SSDEEP

      49152:vKJ0WR7AFPyyiSruXKpk3WFDL9zxnSlmYh:vKlBAFPydSS6W6X9lnum6

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks