Overview

overview

8

Static

static

3

3c9b779456...fb.exe

windows7-x64

7

3c9b779456...fb.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3c9b77945679f3f763de4d052fbea195fb61b654175d62b88d7bfbc17f38fefb

  • Size

    2.1MB

  • Sample

    240107-3vae1ahfb9

  • MD5

    7b6e1adf588ce77419920593970292fb

  • SHA1

    ed1631a3aad6c0def2fff981826c11efcbed1621

  • SHA256

    3c9b77945679f3f763de4d052fbea195fb61b654175d62b88d7bfbc17f38fefb

  • SHA512

    d5a48d92b4ee9651b5adf64e4aa677f7907312bb1d8311446e442de3b75f52368bb58bc2a93b70cdfaf90afd101d40a011c4e4ae31f23551786cedd679435f8c

  • SSDEEP

    49152:KwwLUbowEOvygS7/1sHOqJ02nTPFdRPqxMai9jDkqXfd+/9ALp/GDdv:KwwLUcwti78OqJ7TPB9jDkqXf0FOp/gd

Score
8/10
collectionpersistencespywarestealer

Malware Config

Targets

    • Target

      3c9b77945679f3f763de4d052fbea195fb61b654175d62b88d7bfbc17f38fefb

    • Size

      2.1MB

    • MD5

      7b6e1adf588ce77419920593970292fb

    • SHA1

      ed1631a3aad6c0def2fff981826c11efcbed1621

    • SHA256

      3c9b77945679f3f763de4d052fbea195fb61b654175d62b88d7bfbc17f38fefb

    • SHA512

      d5a48d92b4ee9651b5adf64e4aa677f7907312bb1d8311446e442de3b75f52368bb58bc2a93b70cdfaf90afd101d40a011c4e4ae31f23551786cedd679435f8c

    • SSDEEP

      49152:KwwLUbowEOvygS7/1sHOqJ02nTPFdRPqxMai9jDkqXfd+/9ALp/GDdv:KwwLUcwti78OqJ7TPB9jDkqXf0FOp/gd

    Score
    8/10
    persistencespywarestealercollection

    • Downloads MZ/PE file

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses Microsoft Outlook profiles

      collection

    • Adds Run key to start application

      persistence

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks