Overview

overview

8

Static

static

3

96d372ccc3...9b.exe

windows7-x64

8

96d372ccc3...9b.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    96d372ccc3d30a9d8b9ae116d928cc9b

  • Size

    336KB

  • Sample

    240212-le54asbe86

  • MD5

    96d372ccc3d30a9d8b9ae116d928cc9b

  • SHA1

    43711cf1e69b542827159752a4580f24a2cfd083

  • SHA256

    f195392caaefc5fcb395ca0c8dd9189ea2f1a4188ecd52f610d7c0d687cf211a

  • SHA512

    7dd25b6734a1b1722d62c397788d8d7a91af799c275583aced7ed90ffb09bf5eaaaaffcaa267a2a5d3ee2a834634b7dda5f49b5de377854382e7ebd00db6e200

  • SSDEEP

    6144:ioPmiCCShWKIQGCO/JO5JziH1lmoZ7/Csg+F0Fqa3pS2f5joHjrWN6DGU+:nPmiCbLIQGf/EzwmkGB+F0H3Lf5jErW1

Score
8/10
evasionpersistencespywarestealer

Malware Config

Targets

    • Target

      96d372ccc3d30a9d8b9ae116d928cc9b

    • Size

      336KB

    • MD5

      96d372ccc3d30a9d8b9ae116d928cc9b

    • SHA1

      43711cf1e69b542827159752a4580f24a2cfd083

    • SHA256

      f195392caaefc5fcb395ca0c8dd9189ea2f1a4188ecd52f610d7c0d687cf211a

    • SHA512

      7dd25b6734a1b1722d62c397788d8d7a91af799c275583aced7ed90ffb09bf5eaaaaffcaa267a2a5d3ee2a834634b7dda5f49b5de377854382e7ebd00db6e200

    • SSDEEP

      6144:ioPmiCCShWKIQGCO/JO5JziH1lmoZ7/Csg+F0Fqa3pS2f5joHjrWN6DGU+:nPmiCbLIQGf/EzwmkGB+F0H3Lf5jErW1

    Score
    8/10
    evasionpersistencespywarestealer

    • Disables taskbar notifications via registry modification

      evasion

    • Modifies Installed Components in the registry

      persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks