Overview

overview

8

Static

static

3

59f669eed8...3c.exe

windows7-x64

8

59f669eed8...3c.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    59f669eed88b93c8114ad4869b04b93c

  • Size

    320KB

  • Sample

    240114-b86a2sahd4

  • MD5

    59f669eed88b93c8114ad4869b04b93c

  • SHA1

    43d52b551d8a156b20335629f51c7d7dcd930889

  • SHA256

    b3bf6181c77ed54d85be8cf6c57bf8fd1766f97bcc5ebc3fbd8399be3d2b2b09

  • SHA512

    151df415d5984a44424b01b24ec087b17e8a5b686acb3406dd870289ebc8c295299a00a7d54bdefd824bc48fadb3906ca60b3af2b93f8aa1485eacc6105a7ef3

  • SSDEEP

    6144:7qyFiS+i5xjy9C6f0xXv6QYcrS01IqD/2x4n3iuTblF0eL:7qaiS5Py99Ov6QYcrS01bOETT70e

Score
8/10
evasionpersistencespywarestealer

Malware Config

Targets

    • Target

      59f669eed88b93c8114ad4869b04b93c

    • Size

      320KB

    • MD5

      59f669eed88b93c8114ad4869b04b93c

    • SHA1

      43d52b551d8a156b20335629f51c7d7dcd930889

    • SHA256

      b3bf6181c77ed54d85be8cf6c57bf8fd1766f97bcc5ebc3fbd8399be3d2b2b09

    • SHA512

      151df415d5984a44424b01b24ec087b17e8a5b686acb3406dd870289ebc8c295299a00a7d54bdefd824bc48fadb3906ca60b3af2b93f8aa1485eacc6105a7ef3

    • SSDEEP

      6144:7qyFiS+i5xjy9C6f0xXv6QYcrS01IqD/2x4n3iuTblF0eL:7qaiS5Py99Ov6QYcrS01bOETT70e

    Score
    8/10
    evasionpersistencespywarestealer

    • Disables taskbar notifications via registry modification

      evasion

    • Modifies Installed Components in the registry

      persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks