Overview

overview

7

Static

static

3

042d8ea30d...e8.exe

windows7-x64

7

042d8ea30d...e8.exe

windows10-2004-x64

4

Sharing

Copy URL Twitter E-mail

General

  • Target

    042d8ea30d91dbcb55a9d8c4e61951d0851f8585a2ae3f5dfc247c0ef196f1e8

  • Size

    1.8MB

  • Sample

    240309-p92k5shb6y

  • MD5

    2ff77430126f26e46f2dfafa58beccb2

  • SHA1

    bc615247be69364cecc0774f9367a48595283db7

  • SHA256

    042d8ea30d91dbcb55a9d8c4e61951d0851f8585a2ae3f5dfc247c0ef196f1e8

  • SHA512

    56c516bf398c9c15c2796cd16c221a160afae19070f09134286cf620474dbd8ef68c6f6fdcd4a5fd677e77c84ae3464bc23f49a6ea3918dcf5eec21ed57c6d22

  • SSDEEP

    49152:kM9QPdxwfE7WlFwKAfzuTiDFUFkbDmg27RnWGj:k1PdVQFwKZCFgOD527BWG

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      042d8ea30d91dbcb55a9d8c4e61951d0851f8585a2ae3f5dfc247c0ef196f1e8

    • Size

      1.8MB

    • MD5

      2ff77430126f26e46f2dfafa58beccb2

    • SHA1

      bc615247be69364cecc0774f9367a48595283db7

    • SHA256

      042d8ea30d91dbcb55a9d8c4e61951d0851f8585a2ae3f5dfc247c0ef196f1e8

    • SHA512

      56c516bf398c9c15c2796cd16c221a160afae19070f09134286cf620474dbd8ef68c6f6fdcd4a5fd677e77c84ae3464bc23f49a6ea3918dcf5eec21ed57c6d22

    • SSDEEP

      49152:kM9QPdxwfE7WlFwKAfzuTiDFUFkbDmg27RnWGj:k1PdVQFwKZCFgOD527BWG

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks