Overview

overview

7

Static

static

3

c438b3388e...aa.exe

windows7-x64

7

c438b3388e...aa.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    c438b3388e0ead35179bb3829adbcc50f1d3f3bf75fe645c8578ecc78375e0aa

  • Size

    1.8MB

  • Sample

    240408-m381jaah61

  • MD5

    99e2196bc2532a27cb1dc3f63d00a5fa

  • SHA1

    e2b98f6a236c1d958f5d72ad84a967c41ef30fdc

  • SHA256

    c438b3388e0ead35179bb3829adbcc50f1d3f3bf75fe645c8578ecc78375e0aa

  • SHA512

    c74a39247f4507bce022d3c47e6afb795917de507ab42b61d667ae8b25dcf0fb773e0d64fbb6d012852fd224670677725a2d38c1ef2ad970f8e434e39d32f3ea

  • SSDEEP

    49152:Bx5SUW/cxUitIGLsF0nb+tJVYleAMz77+WA8gDUYmvFur31yAipQCtXxc0H:BvbjVkjjCAzJaU7dG1yfpVBlH

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      c438b3388e0ead35179bb3829adbcc50f1d3f3bf75fe645c8578ecc78375e0aa

    • Size

      1.8MB

    • MD5

      99e2196bc2532a27cb1dc3f63d00a5fa

    • SHA1

      e2b98f6a236c1d958f5d72ad84a967c41ef30fdc

    • SHA256

      c438b3388e0ead35179bb3829adbcc50f1d3f3bf75fe645c8578ecc78375e0aa

    • SHA512

      c74a39247f4507bce022d3c47e6afb795917de507ab42b61d667ae8b25dcf0fb773e0d64fbb6d012852fd224670677725a2d38c1ef2ad970f8e434e39d32f3ea

    • SSDEEP

      49152:Bx5SUW/cxUitIGLsF0nb+tJVYleAMz77+WA8gDUYmvFur31yAipQCtXxc0H:BvbjVkjjCAzJaU7dG1yfpVBlH

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks