Overview

overview

8

Static

static

3

stub.exe

windows11-21h2-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    stub.exe

  • Size

    8.5MB

  • Sample

    240106-d95f9ahda5

  • MD5

    3db9bf3efe3df1c4e0c094595a3b8054

  • SHA1

    ac633f884dca446312eb070e199c570dfc6c6a40

  • SHA256

    51efd2feaf9fd0eefd97afb13cd6590c9377544153d4a7d7223e23d04c68cd05

  • SHA512

    377060ce8fe2fd247cab22b92d3b9ba934e1bd483fd6c0a2bc79fab30e0487197df816e1658cb06e11eb63354e128fa4da9acfd7fa0a8c911eeae2d0ce4a34bb

  • SSDEEP

    196608:rV1kcE61W903eV4QR7MToEuGxgh858F0ibfU36e7mgABHbk9qtllJ:sctW+eGQR7MTozGxu8C0ibfY6e5ba

Score
8/10
pyinstallerspywarestealer

Malware Config

Targets

    • Target

      stub.exe

    • Size

      8.5MB

    • MD5

      3db9bf3efe3df1c4e0c094595a3b8054

    • SHA1

      ac633f884dca446312eb070e199c570dfc6c6a40

    • SHA256

      51efd2feaf9fd0eefd97afb13cd6590c9377544153d4a7d7223e23d04c68cd05

    • SHA512

      377060ce8fe2fd247cab22b92d3b9ba934e1bd483fd6c0a2bc79fab30e0487197df816e1658cb06e11eb63354e128fa4da9acfd7fa0a8c911eeae2d0ce4a34bb

    • SSDEEP

      196608:rV1kcE61W903eV4QR7MToEuGxgh858F0ibfU36e7mgABHbk9qtllJ:sctW+eGQR7MTozGxu8C0ibfY6e5ba

    Score
    8/10
    spywarestealer

    • Drops file in Drivers directory

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks