Overview

overview

10

Static

static

10

dc70792e3b...9e.exe

windows7-x64

6

dc70792e3b...9e.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dc70792e3bec9dbfd00abcceee8d849e

  • Size

    1.3MB

  • Sample

    240321-yabp4sgc47

  • MD5

    dc70792e3bec9dbfd00abcceee8d849e

  • SHA1

    4003a071bd2e9042f9991b290dfb1f5d42838f54

  • SHA256

    ba15278f7ee4ca3519f945f491abaf7234a48bcdb1baec7f471e59d6ee19fc91

  • SHA512

    a2c5280134868c3f8d215796045535f0951b64462b3dc2aefbc186d45da43b3764b94d43042112d2218014f4dedb2d27db0fc28fd9f6ae2a241d78cd3d351188

  • SSDEEP

    24576:HAFnWzNUe3a9nvOvk+/QBNFjmDWTe2c6Ek:yWzmeK9n2FQbFBTq4

Score
10/10
fabookiespywarestealer

Malware Config

Targets

    • Target

      dc70792e3bec9dbfd00abcceee8d849e

    • Size

      1.3MB

    • MD5

      dc70792e3bec9dbfd00abcceee8d849e

    • SHA1

      4003a071bd2e9042f9991b290dfb1f5d42838f54

    • SHA256

      ba15278f7ee4ca3519f945f491abaf7234a48bcdb1baec7f471e59d6ee19fc91

    • SHA512

      a2c5280134868c3f8d215796045535f0951b64462b3dc2aefbc186d45da43b3764b94d43042112d2218014f4dedb2d27db0fc28fd9f6ae2a241d78cd3d351188

    • SSDEEP

      24576:HAFnWzNUe3a9nvOvk+/QBNFjmDWTe2c6Ek:yWzmeK9n2FQbFBTq4

    Score
    7/10
    spywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks