Overview

overview

10

Static

static

10

6f788051e5...31.exe

windows7-x64

9

6f788051e5...31.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    6f788051e5edb1aeaca24339f08f8d415d3d81b75c6fddf07398d20c051faf31.exe

  • Size

    342KB

  • Sample

    240128-3lblpseefj

  • MD5

    63a54f659f5fa82b05c3ab5880800834

  • SHA1

    2de1ec75310d98f8b7d06e70ac93acbdda574acd

  • SHA256

    f0371c758aa6700be35c490b44e852bf1d0e6f143fad315dfa2b4ba183a96274

  • SHA512

    d420c8554d67577d61e09357652246c4a4162849854e550d9c747fd9fcbda6a513c07b152400a6ca03c41911f9354b2a7788fc9fc485053ab3749b504463364c

  • SSDEEP

    6144:Ix2QdiglMFGfzIBeZO8Wf2cMRMCO/xZqqDLuz+4pQoL27aR9:IAQsgScEydMCJqnuq4z2mR9

Score
10/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      6f788051e5edb1aeaca24339f08f8d415d3d81b75c6fddf07398d20c051faf31.exe

    • Size

      342KB

    • MD5

      63a54f659f5fa82b05c3ab5880800834

    • SHA1

      2de1ec75310d98f8b7d06e70ac93acbdda574acd

    • SHA256

      f0371c758aa6700be35c490b44e852bf1d0e6f143fad315dfa2b4ba183a96274

    • SHA512

      d420c8554d67577d61e09357652246c4a4162849854e550d9c747fd9fcbda6a513c07b152400a6ca03c41911f9354b2a7788fc9fc485053ab3749b504463364c

    • SSDEEP

      6144:Ix2QdiglMFGfzIBeZO8Wf2cMRMCO/xZqqDLuz+4pQoL27aR9:IAQsgScEydMCJqnuq4z2mR9

    Score
    9/10
    spywarestealerdiscovery

    • Detects command variations typically used by ransomware

    • Drops startup file

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks