Overview

overview

7

Static

static

3

251df6098c...ce.exe

windows7-x64

7

251df6098c...ce.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    251df6098c1cf645ed67f14f229c03ce

  • Size

    388KB

  • Sample

    231225-rpgrcaadh3

  • MD5

    251df6098c1cf645ed67f14f229c03ce

  • SHA1

    418fc7f1bad7d18a17380194189d756baa785dac

  • SHA256

    46a9de4b62076e6481321bb4c57aea9082c03eec6c13244d95555998ee0a86eb

  • SHA512

    202255696a20db9f837fa2da27c3a35a402bdbe79c0758f76a1c17292e54e5e6c843d1ebe81baf428143f5bbc9b0d53395063057f1a37d593431b336cd4989de

  • SSDEEP

    12288:R1p7I4KFmC88QTED/vwaITqSFFFFXch0r5J:3p7Ph/ED/vRufFFFFXcu7

Score
7/10
discoverypersistencespywarestealer

Malware Config

Targets

    • Target

      251df6098c1cf645ed67f14f229c03ce

    • Size

      388KB

    • MD5

      251df6098c1cf645ed67f14f229c03ce

    • SHA1

      418fc7f1bad7d18a17380194189d756baa785dac

    • SHA256

      46a9de4b62076e6481321bb4c57aea9082c03eec6c13244d95555998ee0a86eb

    • SHA512

      202255696a20db9f837fa2da27c3a35a402bdbe79c0758f76a1c17292e54e5e6c843d1ebe81baf428143f5bbc9b0d53395063057f1a37d593431b336cd4989de

    • SSDEEP

      12288:R1p7I4KFmC88QTED/vwaITqSFFFFXch0r5J:3p7Ph/ED/vRufFFFFXcu7

    Score
    7/10
    spywarestealerdiscoverypersistence

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks