Overview

overview

7

Static

static

3

cd8c7d4c02...3d.exe

windows7-x64

7

cd8c7d4c02...3d.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cd8c7d4c028dc9ac98f80f7c3203473d

  • Size

    3.7MB

  • Sample

    240316-j22chsha55

  • MD5

    cd8c7d4c028dc9ac98f80f7c3203473d

  • SHA1

    d75f21417f513abd784ea8814c3bb106b5c7bda3

  • SHA256

    f01a44e363340833fa7c371cb7968cb4a8028de8f36cea480a299f0cf52ecd83

  • SHA512

    90f466cf0bf52a7c5a81ba0ce2717a817b71bb1c539cabf92e8cc70f0bd94858ad6ec620b2a08456a112036f39bdd0b871e12d04eb52f238404569aed1b10191

  • SSDEEP

    98304:0/yGY2TEvQCRnZ2d1eg1xwnYdFyjaVmNo:0/yGxTIRZ2h1aYdFuq

Score
7/10
discoverypersistencespywarestealer

Malware Config

Targets

    • Target

      cd8c7d4c028dc9ac98f80f7c3203473d

    • Size

      3.7MB

    • MD5

      cd8c7d4c028dc9ac98f80f7c3203473d

    • SHA1

      d75f21417f513abd784ea8814c3bb106b5c7bda3

    • SHA256

      f01a44e363340833fa7c371cb7968cb4a8028de8f36cea480a299f0cf52ecd83

    • SHA512

      90f466cf0bf52a7c5a81ba0ce2717a817b71bb1c539cabf92e8cc70f0bd94858ad6ec620b2a08456a112036f39bdd0b871e12d04eb52f238404569aed1b10191

    • SSDEEP

      98304:0/yGY2TEvQCRnZ2d1eg1xwnYdFyjaVmNo:0/yGxTIRZ2h1aYdFuq

    Score
    7/10
    discoverypersistencespywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks