Overview

overview

7

Static

static

3

c7079debc3...59.exe

windows7-x64

7

c7079debc3...59.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    c7079debc3c25795f0c204a429faa659

  • Size

    1.7MB

  • Sample

    240313-2k1nrsbb7t

  • MD5

    c7079debc3c25795f0c204a429faa659

  • SHA1

    c072f7829f250271a8e54130524def6a42042756

  • SHA256

    b6c1526b45d5591758b1f58873be29e22e7ca49952c66b279981f5c35596e8ad

  • SHA512

    2e53ef051b63231564823e5a1dd018b3248b9c3c5c2516339427117f980b749e1225ac99c90eab6c1ff9659d519893a0fd26c25c2f84d0e0237c0dac79412253

  • SSDEEP

    24576:X8uIXVav9MkSlYjboGxZqwijaahIJpX6x/WnSyhbzv8O0X:L9v9MzlYvoGxUSJpXKWSytLdu

Score
7/10
persistencespywarestealer

Malware Config

Targets

    • Target

      c7079debc3c25795f0c204a429faa659

    • Size

      1.7MB

    • MD5

      c7079debc3c25795f0c204a429faa659

    • SHA1

      c072f7829f250271a8e54130524def6a42042756

    • SHA256

      b6c1526b45d5591758b1f58873be29e22e7ca49952c66b279981f5c35596e8ad

    • SHA512

      2e53ef051b63231564823e5a1dd018b3248b9c3c5c2516339427117f980b749e1225ac99c90eab6c1ff9659d519893a0fd26c25c2f84d0e0237c0dac79412253

    • SSDEEP

      24576:X8uIXVav9MkSlYjboGxZqwijaahIJpX6x/WnSyhbzv8O0X:L9v9MzlYvoGxUSJpXKWSytLdu

    Score
    7/10
    persistencespywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks