Overview

overview

7

Static

static

3

0270ff435b...73.exe

windows7-x64

7

0270ff435b...73.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0270ff435b4b63877fc3d8532c1d6573

  • Size

    4.3MB

  • Sample

    231229-yp6h2abca8

  • MD5

    0270ff435b4b63877fc3d8532c1d6573

  • SHA1

    b80e22c0fe47687a3b5b374472eee6c7d5722ca6

  • SHA256

    ecd1044a4e61b3b759f2274f44c18bf57e571d7798ddf766e2150d0d54d9e7a3

  • SHA512

    49907d571bd9c867b6f75aed339ac42499f521d3d904ecb433bc3d0e0f6e04579510fab2b34226da18ca99db84325e3c60045e992233842bb3f344e60088754a

  • SSDEEP

    98304:lvs+wE9XD8VBZM+M6RkMkIM7SOghoTYOXwnS4rV:5V9z8hhoEI

Score
7/10
persistencespywarestealer

Malware Config

Targets

    • Target

      0270ff435b4b63877fc3d8532c1d6573

    • Size

      4.3MB

    • MD5

      0270ff435b4b63877fc3d8532c1d6573

    • SHA1

      b80e22c0fe47687a3b5b374472eee6c7d5722ca6

    • SHA256

      ecd1044a4e61b3b759f2274f44c18bf57e571d7798ddf766e2150d0d54d9e7a3

    • SHA512

      49907d571bd9c867b6f75aed339ac42499f521d3d904ecb433bc3d0e0f6e04579510fab2b34226da18ca99db84325e3c60045e992233842bb3f344e60088754a

    • SSDEEP

      98304:lvs+wE9XD8VBZM+M6RkMkIM7SOghoTYOXwnS4rV:5V9z8hhoEI

    Score
    7/10
    persistencespywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks