Overview

overview

8

Static

static

3

cd3c47dddd...bd.exe

windows7-x64

8

cd3c47dddd...bd.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    cd3c47dddd28b4a304a6acd66e03f1bd

  • Size

    336KB

  • Sample

    240316-f7x1hada2w

  • MD5

    cd3c47dddd28b4a304a6acd66e03f1bd

  • SHA1

    a91e12263f3ec82f2c498cb91a93dcba9de2b62b

  • SHA256

    bd02715228378974d97d7d57157abb0b003b2c04a025dcfea8abb8328cc55a4c

  • SHA512

    f15829e37c4cdb7b524384488a029b777a727dc5d8827c46df6304d68ee326c4448e85711c3eac8ba4eda06bce9b20f9c7e2807987ef11bee53229b5d83fcdc9

  • SSDEEP

    6144:eT/pyuGzn0Ly5cDPEvRywCUoh5wRNgm3fmq3xOL0C81arN/ptT:GGzWy5cDPcHoh5wRB+q3xOL0rs

Score
8/10
evasionpersistencespywarestealer

Malware Config

Targets

    • Target

      cd3c47dddd28b4a304a6acd66e03f1bd

    • Size

      336KB

    • MD5

      cd3c47dddd28b4a304a6acd66e03f1bd

    • SHA1

      a91e12263f3ec82f2c498cb91a93dcba9de2b62b

    • SHA256

      bd02715228378974d97d7d57157abb0b003b2c04a025dcfea8abb8328cc55a4c

    • SHA512

      f15829e37c4cdb7b524384488a029b777a727dc5d8827c46df6304d68ee326c4448e85711c3eac8ba4eda06bce9b20f9c7e2807987ef11bee53229b5d83fcdc9

    • SSDEEP

      6144:eT/pyuGzn0Ly5cDPEvRywCUoh5wRNgm3fmq3xOL0C81arN/ptT:GGzWy5cDPcHoh5wRB+q3xOL0rs

    Score
    8/10
    evasionpersistencespywarestealer

    • Disables taskbar notifications via registry modification

      evasion

    • Modifies Installed Components in the registry

      persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks