Overview

overview

7

Static

static

1

sample.js

windows11-21h2-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    sample

  • Size

    167KB

  • Sample

    240219-bztwnagh36

  • MD5

    ad72887680828cd2dcb929e1150990fb

  • SHA1

    4b59878cb814a7d6ba2a066a34f861e7741b19b3

  • SHA256

    3cb6323a93c484511ee59408495aeb0289230ccd8d1b682bfb6b481744115b2d

  • SHA512

    642a596fe6cf399fe147c7ce68f4db7766462547d90b28c48a2f5f2d4b98aa2725464e1a464d5945f76276e3369ce71947c59641ed8c47a00205c50bd0e7a5dc

  • SSDEEP

    1536:Sq8Sr1A0XM2udEzR1f4nvJ0vRvpNl8msgEsQs3DYHSo3vEQcCPHUQOt+ih+dM9BN:SYXvRvssTo3vEQcCP0Qe

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      sample

    • Size

      167KB

    • MD5

      ad72887680828cd2dcb929e1150990fb

    • SHA1

      4b59878cb814a7d6ba2a066a34f861e7741b19b3

    • SHA256

      3cb6323a93c484511ee59408495aeb0289230ccd8d1b682bfb6b481744115b2d

    • SHA512

      642a596fe6cf399fe147c7ce68f4db7766462547d90b28c48a2f5f2d4b98aa2725464e1a464d5945f76276e3369ce71947c59641ed8c47a00205c50bd0e7a5dc

    • SSDEEP

      1536:Sq8Sr1A0XM2udEzR1f4nvJ0vRvpNl8msgEsQs3DYHSo3vEQcCPHUQOt+ih+dM9BN:SYXvRvssTo3vEQcCP0Qe

    Score
    7/10
    spywarestealer

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Legitimate hosting services abused for malware hosting/C2

    • An obfuscated cmd.exe command-line is typically used to evade detection.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks