Overview

overview

8

Static

static

3

0c3a4b846a...07.exe

windows7-x64

8

0c3a4b846a...07.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    0c3a4b846a7d60686baafcf72b257507

  • Size

    320KB

  • Sample

    231230-dddcwsaca5

  • MD5

    0c3a4b846a7d60686baafcf72b257507

  • SHA1

    beffb491711a9425e2c8ca220a941d59372b3587

  • SHA256

    a5b7414f778f63875096ad252471d0a577655199561271175c827dd4e11a5048

  • SHA512

    9c17ad87287926ed27e6b654e5e2169f5e9d0556abd7ec1ca112f27883adf2f414478e6cd5bb62ffd31a2feda8ad5781cd700f0c383be82c8feff99418ad2ecb

  • SSDEEP

    6144:E+Mg66Nz/jvx4nwZOWvMUu3ofLTo2DBdocI/F74uYb1Ua+APYiL3egwtqAYjt:EmNjzEwZOWvDu3AL02Dohd74uYbiaFlB

Score
8/10
evasionpersistencespywarestealer

Malware Config

Targets

    • Target

      0c3a4b846a7d60686baafcf72b257507

    • Size

      320KB

    • MD5

      0c3a4b846a7d60686baafcf72b257507

    • SHA1

      beffb491711a9425e2c8ca220a941d59372b3587

    • SHA256

      a5b7414f778f63875096ad252471d0a577655199561271175c827dd4e11a5048

    • SHA512

      9c17ad87287926ed27e6b654e5e2169f5e9d0556abd7ec1ca112f27883adf2f414478e6cd5bb62ffd31a2feda8ad5781cd700f0c383be82c8feff99418ad2ecb

    • SSDEEP

      6144:E+Mg66Nz/jvx4nwZOWvMUu3ofLTo2DBdocI/F74uYb1Ua+APYiL3egwtqAYjt:EmNjzEwZOWvDu3AL02Dohd74uYbiaFlB

    Score
    8/10
    evasionpersistencespywarestealer

    • Disables taskbar notifications via registry modification

      evasion

    • Modifies Installed Components in the registry

      persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks