Overview

overview

7

Static

static

3

8ac44cb295...5e.exe

windows7-x64

7

8ac44cb295...5e.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    8ac44cb2959508885a59853b53557364f3f09a5163a5e713693aa90c4783425e

  • Size

    3.3MB

  • Sample

    240408-3pwfaafc85

  • MD5

    e30ef5c05d619df0b67d6f1af88ed90e

  • SHA1

    52bffc1997868f13742c171edf23f894266ec7f6

  • SHA256

    8ac44cb2959508885a59853b53557364f3f09a5163a5e713693aa90c4783425e

  • SHA512

    f79dfca7f06448eb42717adb472f49132679f2031eb033983292c894716a3f59ee4fc81bd3c94b190dca070c5fe5bf8b0c69f1a5c4afb8c1a2f2d08adc72269b

  • SSDEEP

    49152:83BKBUvdWJTy4nia5w32OvfZcvkuRdLHkJEANmsvHHu3l70jIpM3kiSBM29mhNq:9ni+w32+QDENms2V70uMhSBrkNq

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      8ac44cb2959508885a59853b53557364f3f09a5163a5e713693aa90c4783425e

    • Size

      3.3MB

    • MD5

      e30ef5c05d619df0b67d6f1af88ed90e

    • SHA1

      52bffc1997868f13742c171edf23f894266ec7f6

    • SHA256

      8ac44cb2959508885a59853b53557364f3f09a5163a5e713693aa90c4783425e

    • SHA512

      f79dfca7f06448eb42717adb472f49132679f2031eb033983292c894716a3f59ee4fc81bd3c94b190dca070c5fe5bf8b0c69f1a5c4afb8c1a2f2d08adc72269b

    • SSDEEP

      49152:83BKBUvdWJTy4nia5w32OvfZcvkuRdLHkJEANmsvHHu3l70jIpM3kiSBM29mhNq:9ni+w32+QDENms2V70uMhSBrkNq

    Score
    7/10
    spywarestealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks