Overview

overview

8

Static

static

1

665b1e8924...9e.exe

windows7-x64

8

665b1e8924...9e.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    665b1e8924e8117ddaa0d7628ac3ad70de8c4c4456ccf14bd9871c246f0de69e.exe.zip

  • Size

    11.2MB

  • Sample

    231231-azmxnsabh7

  • MD5

    320f0e54b5f31fffb3352aac90c28426

  • SHA1

    3363498423e9ad0079b81d4af989d6fe6ea0c50f

  • SHA256

    edef6784b742ec5527b547e084713a478db2e68fb014fbafde8bd9c70140afe5

  • SHA512

    51c7a826233bec0eb64cebfd49a8ebff077332a429009816c8f15676d8ef1e9c205f83e7c78b2bc80e888a85457fbe3df2c2b2d425da97f13c90e295b6423b93

  • SSDEEP

    196608:8BNURZH4ovho0oiShbhPPv3Z5NxHn7eCUwJgekbQkL8hb05t8T1lu8:8BNUHbvhqiSZhPX3Z5PH73Jg3Cm5KT1n

Score
8/10
persistencespywarestealer

Malware Config

Targets

    • Target

      665b1e8924e8117ddaa0d7628ac3ad70de8c4c4456ccf14bd9871c246f0de69e.exe

    • Size

      21.7MB

    • MD5

      2cf0141f66a75fbb26d52bf0f14ea33e

    • SHA1

      cb102b2af2ca691671f360c420e63f41090c33f5

    • SHA256

      665b1e8924e8117ddaa0d7628ac3ad70de8c4c4456ccf14bd9871c246f0de69e

    • SHA512

      971a5e29f20c9e4b85fc9f777b691f51cf46ec39181728ea609a67d423cdd5a184271dd3d36d209f0c6f75850018cd05cf959109eefaf71ce6fba14952353db3

    • SSDEEP

      393216:ooOSZ3Thb86/dTIaLOxkaq5Z4lmGrvRAVedwOdi+gNDc0anLOcs0edJsv6tWKFd7:oonSLncn

    Score
    8/10
    persistencespywarestealer

    • Drops file in Drivers directory

    • Sets service image path in registry

      persistence

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks