Overview

overview

7

Static

static

1

AutoIt3.exe

windows7-x64

7

AutoIt3.exe

windows10-2004-x64

3

script.au3

windows7-x64

3

script.au3

windows10-2004-x64

3

Resubmissions

20-03-2024 13:08

240320-qdmyjshb67 7

20-03-2024 13:05

240320-qbnr3ahh2y 3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    autoit_investigation.zip

  • Size

    706KB

  • Sample

    240320-qdmyjshb67

  • MD5

    a1ae2071fc167d45250da071e847e11d

  • SHA1

    1982316bf8e6dc4cdedf7bd8d6b676c20b1ce9ea

  • SHA256

    f71f038f516a58a3217ff0e7850abcab832e1834bcd4329ba14025bf4ab61fda

  • SHA512

    5e37f144481b458aefac20981fecdbb7c647d92a94bd9d956fabeeb89dc353e5cc0211fd857c583d0f9643d64de79c4b35b7cb4cd8a4d37e4cbb1219f55adee0

  • SSDEEP

    12288:ujccG0H91GVQpZ+AJt5Ob8WdSkUKc4xRI3a06/r7C2DuQ4SqmI3rhFYOkoPM:mFH91rpIaWdSkUKc4xA0lPI3rrHxPM

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      AutoIt3.exe

    • Size

      872KB

    • MD5

      c56b5f0201a3b3de53e561fe76912bfd

    • SHA1

      2a4062e10a5de813f5688221dbeb3f3ff33eb417

    • SHA256

      237d1bca6e056df5bb16a1216a434634109478f882d3b1d58344c801d184f95d

    • SHA512

      195b98245bb820085ae9203cdb6d470b749d1f228908093e8606453b027b7d7681ccd7952e30c2f5dd40f8f0b999ccfc60ebb03419b574c08de6816e75710d2c

    • SSDEEP

      12288:6pVWeOV7GtINsegA/hMyyzlcqikvAfcN9b2MyZa31twoPTdFxgawV2M01:6T3E53Myyzl0hMf1tr7Caw8M01

    Score
    7/10
    spywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

    • Target

      script.au3

    • Size

      469KB

    • MD5

      e1803b01e3f187355dbeb87a0c91b76c

    • SHA1

      b78bc11afacf9cfcaade0e200a344c4602f2053d

    • SHA256

      46c5ed90e3d6b8bc85ae369aa87ba75a12eed6a7cfa8edeb497e5ec7f7c75d9e

    • SHA512

      bfcc8cf7c72bcbf2aa2586a653df00e5c0e7fccb748a5fcdf97ebfaa594fbf81e1c24ce1f5ced039dea76bf251a76ec85db2187614039fa882d702bdc14c6bda

    • SSDEEP

      12288:ZkvyTm8GvC4sSTNJhtXVX9Asbbyhz2mfBLa7EVRcJu4pLrFpUGn6KG5N0iAe+:AsJGvBtTT1OBLZvu6N0a+

    Score
    3/10
    behavioral3behavioral4

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

System Information Discovery

2
T1082

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks