Overview

overview

9

Static

static

3

58f720c766...d1.exe

windows7-x64

1

58f720c766...d1.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    58f720c7664a0eea1e99b9293dffba1d45930a1ace26ba296ae81f461d5953d1.exe

  • Size

    4.8MB

  • Sample

    240212-ew1ftagh6v

  • MD5

    3cac4651ce934a43d65392a7e829a7fd

  • SHA1

    b4c714c4706e707ffa1169f1f2b3544a609aa81c

  • SHA256

    58f720c7664a0eea1e99b9293dffba1d45930a1ace26ba296ae81f461d5953d1

  • SHA512

    9af0c99801ad057d23ae93daf2fa791b1458c64fff9500949ac6d61ee7cd40c6a20c2cf9cd6fd9c65f40e92e673e68717d448bc61512532f8313dbaccaff9cca

  • SSDEEP

    49152:bf9ADg4ioiWuWekjXIKC38hje8XhDA4FYb+Ecv/6:yi3WulBKg

Score
9/10
spywarestealer

Malware Config

Targets

    • Target

      58f720c7664a0eea1e99b9293dffba1d45930a1ace26ba296ae81f461d5953d1.exe

    • Size

      4.8MB

    • MD5

      3cac4651ce934a43d65392a7e829a7fd

    • SHA1

      b4c714c4706e707ffa1169f1f2b3544a609aa81c

    • SHA256

      58f720c7664a0eea1e99b9293dffba1d45930a1ace26ba296ae81f461d5953d1

    • SHA512

      9af0c99801ad057d23ae93daf2fa791b1458c64fff9500949ac6d61ee7cd40c6a20c2cf9cd6fd9c65f40e92e673e68717d448bc61512532f8313dbaccaff9cca

    • SSDEEP

      49152:bf9ADg4ioiWuWekjXIKC38hje8XhDA4FYb+Ecv/6:yi3WulBKg

    Score
    9/10
    spywarestealer

    • Detects executables containing bas64 encoded gzip files

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks