Overview

overview

10

Static

static

10

1f4e927f6e...a4.exe

windows7-x64

8

1f4e927f6e...a4.exe

windows10-1703-x64

8

1f4e927f6e...a4.exe

windows10-2004-x64

8

1f4e927f6e...a4.exe

windows11-21h2-x64

8

Resubmissions

26/03/2024, 14:35

240326-ryecksfd5y10

26/03/2024, 14:27

240326-rse2xsfb8y10

Sharing

Copy URL Twitter E-mail

General

  • Target
    New folder.rar
  • Size 15.3MB
  • Sample240326-ryecksfd5y
  • SHA256 1cdf0dcd13a46906d73588a4f2ef20637d25706ce90b53a7b6f1701c28cb3596
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
persistencepyinstallerspywarestealerupx

Malware Config

Targets

    • Target
      1f4e927f6e5ff4ae660f4d99194a9a7c05d5d829c6c3dbe1ee52a00fc740d6a4.exe
    • Size 2.2MB
    • SHA256 1f4e927f6e5ff4ae660f4d99194a9a7c05d5d829c6c3dbe1ee52a00fc740d6a4
    • MD5 SHA1 SHA512 SSDEEP
    Score
    8/10
    persistencespywarestealer

    • Drops file in Drivers directory

    • Modifies Installed Components in the registry

      persistence

    • Drops startup file

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks