Overview

overview

10

Static

static

10

889a9b3a0b...0f.exe

windows7-x64

10

889a9b3a0b...0f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    889a9b3a0b0dfdfeae07ba30476d6cd04ec3de9d1f95860861ff5d8cdbe2f10f

  • Size

    630KB

  • Sample

    240327-b6ds1sce5s

  • MD5

    f22ded8b2680bcbdf4e06f0a4d57cd6c

  • SHA1

    1267c180fa68b131cb73febe0c6ec4d634cb27d4

  • SHA256

    889a9b3a0b0dfdfeae07ba30476d6cd04ec3de9d1f95860861ff5d8cdbe2f10f

  • SHA512

    ab123201b0e6a487db478cfd28be40d544e8d059581b13c1c66a3dff1411afe7a298c00f4bdefc841f3d9827cb62544b198dd72b58720346b548e81c926db54e

  • SSDEEP

    12288:aG1X3MgZFyA1wcoRq4dPhAE1iynYaJANgR2w1d0mOA:aG1sgZsA1wcoRqpEqaJ4uSbA

Score
10/10
a310loggercollectionspywarestealer

Malware Config

Targets

    • Target

      889a9b3a0b0dfdfeae07ba30476d6cd04ec3de9d1f95860861ff5d8cdbe2f10f

    • Size

      630KB

    • MD5

      f22ded8b2680bcbdf4e06f0a4d57cd6c

    • SHA1

      1267c180fa68b131cb73febe0c6ec4d634cb27d4

    • SHA256

      889a9b3a0b0dfdfeae07ba30476d6cd04ec3de9d1f95860861ff5d8cdbe2f10f

    • SHA512

      ab123201b0e6a487db478cfd28be40d544e8d059581b13c1c66a3dff1411afe7a298c00f4bdefc841f3d9827cb62544b198dd72b58720346b548e81c926db54e

    • SSDEEP

      12288:aG1X3MgZFyA1wcoRq4dPhAE1iynYaJANgR2w1d0mOA:aG1sgZsA1wcoRqpEqaJ4uSbA

    Score
    10/10
    a310loggercollectionspywarestealer

    • A310logger

      A310 Logger is a .NET stealer/logger targeting passwords from browsers and email clients.

      stealerspywarea310logger

    • A310logger Executable

    • Reads WinSCP keys stored on the system

      Tries to access WinSCP stored sessions.

      spywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses Microsoft Outlook profiles

      collection
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

2
T1552

Credentials In Files

1
T1552.001

Credentials in Registry

1
T1552.002

Discovery

Lateral Movement

Collection

Data from Local System

2
T1005

Email Collection

1
T1114

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks