Overview

overview

8

Static

static

3

d790363eed...1a.exe

windows7-x64

8

d790363eed...1a.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    d790363eedec183e4e43e7a4375c751a

  • Size

    340KB

  • Sample

    240320-bq9kradc24

  • MD5

    d790363eedec183e4e43e7a4375c751a

  • SHA1

    3665c11a5bca381098506222e6ccc62290ec9f85

  • SHA256

    cc1d2d096053f51a492ea8fcd16c72b4c127981e8294c65359a2b92a3595c5c7

  • SHA512

    45d920691f9d01a6eb78f5fd6c4f65ade0cc3953d06036e511fd4a01d1cdac5fc3179b16ee072064ece343b2ca106f45a741dfd3476a25a8082dcf16b6ddea0c

  • SSDEEP

    6144:Q+++9LkPr8sgmd8/QbqRq0L0h10MH1dB+DWzDXDGU+:PRkPJgmd8ob1lzWqDXDGU+

Score
8/10
evasionpersistencespywarestealer

Malware Config

Targets

    • Target

      d790363eedec183e4e43e7a4375c751a

    • Size

      340KB

    • MD5

      d790363eedec183e4e43e7a4375c751a

    • SHA1

      3665c11a5bca381098506222e6ccc62290ec9f85

    • SHA256

      cc1d2d096053f51a492ea8fcd16c72b4c127981e8294c65359a2b92a3595c5c7

    • SHA512

      45d920691f9d01a6eb78f5fd6c4f65ade0cc3953d06036e511fd4a01d1cdac5fc3179b16ee072064ece343b2ca106f45a741dfd3476a25a8082dcf16b6ddea0c

    • SSDEEP

      6144:Q+++9LkPr8sgmd8/QbqRq0L0h10MH1dB+DWzDXDGU+:PRkPJgmd8ob1lzWqDXDGU+

    Score
    8/10
    evasionpersistencespywarestealer

    • Disables taskbar notifications via registry modification

      evasion

    • Modifies Installed Components in the registry

      persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks