Overview

overview

7

Static

static

3

b69bd2a127...35.exe

windows7-x64

7

b69bd2a127...35.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    b69bd2a127cc2c12ba4b628bb0e0d035

  • Size

    2.4MB

  • Sample

    240306-f3mc7sdb43

  • MD5

    b69bd2a127cc2c12ba4b628bb0e0d035

  • SHA1

    70c85051e09cbc58ae2429368c019714729d5785

  • SHA256

    0e8c9f17102cea76338850cc9d5069233adc41bc650f2a866b733d0d8647f6de

  • SHA512

    88609002b4e787b0c5d768ac8ef5f4f457a9d742e8c5b1ac6c5cd92ba0a560fbeb8b80663eb6af6ec60135925c4666bc087e1ee23b081718409ae6d91c51ca0d

  • SSDEEP

    49152:MdL41dExzKkljS0g7mM+M6RkMkIM7I067W:ZTHAM+M6RkMkIM7R

Score
7/10
persistencespywarestealer

Malware Config

Targets

    • Target

      b69bd2a127cc2c12ba4b628bb0e0d035

    • Size

      2.4MB

    • MD5

      b69bd2a127cc2c12ba4b628bb0e0d035

    • SHA1

      70c85051e09cbc58ae2429368c019714729d5785

    • SHA256

      0e8c9f17102cea76338850cc9d5069233adc41bc650f2a866b733d0d8647f6de

    • SHA512

      88609002b4e787b0c5d768ac8ef5f4f457a9d742e8c5b1ac6c5cd92ba0a560fbeb8b80663eb6af6ec60135925c4666bc087e1ee23b081718409ae6d91c51ca0d

    • SSDEEP

      49152:MdL41dExzKkljS0g7mM+M6RkMkIM7I067W:ZTHAM+M6RkMkIM7R

    Score
    7/10
    persistencespywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks