Overview

overview

7

Static

static

3

b7ca0c079b...d7.exe

windows7-x64

7

b7ca0c079b...d7.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b7ca0c079bd39cbf1526c7f0c5040fd7

  • Size

    3.1MB

  • Sample

    240306-tbkxyscg2t

  • MD5

    b7ca0c079bd39cbf1526c7f0c5040fd7

  • SHA1

    ce1d04495b871635a3526ec24aa84b6295b98053

  • SHA256

    d78fc484d69d7d2fb0f0d29376c8901f1230aec74060243095f638d46a7c2a0e

  • SHA512

    c2472f53583667bc3a9bf085015f4acefe2020721ebec85942a07087a085ba31e158d874f4054430ed99bf804faf61f85e42c3d36d6eff12cbe7ae2a667ac400

  • SSDEEP

    49152:Iss1TPakOElMaFLkJhKPgssSt2gpZqhaK6zbfqdl:sNak7Mhv7Stjx

Score
7/10
persistencespywarestealer

Malware Config

Targets

    • Target

      b7ca0c079bd39cbf1526c7f0c5040fd7

    • Size

      3.1MB

    • MD5

      b7ca0c079bd39cbf1526c7f0c5040fd7

    • SHA1

      ce1d04495b871635a3526ec24aa84b6295b98053

    • SHA256

      d78fc484d69d7d2fb0f0d29376c8901f1230aec74060243095f638d46a7c2a0e

    • SHA512

      c2472f53583667bc3a9bf085015f4acefe2020721ebec85942a07087a085ba31e158d874f4054430ed99bf804faf61f85e42c3d36d6eff12cbe7ae2a667ac400

    • SSDEEP

      49152:Iss1TPakOElMaFLkJhKPgssSt2gpZqhaK6zbfqdl:sNak7Mhv7Stjx

    Score
    7/10
    persistencespywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks