7cd975ad9527659ded0174215814798afbbe615dfe5012b9def89e9d9f2bcbd5

Resubmissions

09/04/2024, 13:39

240409-qx1czsbf717

09/04/2024, 13:39

09/04/2024, 13:39

09/04/2024, 13:39

03/04/2024, 19:01

Sharing

Copy URL Twitter E-mail

General

Target
6be4950d9a919f5d0150d19552b340e9b5ef1959a18fd97b18778bf39e1a6421.zip
Size 4.2MB
Sample240409-qxzfpagd52
SHA256 7cd975ad9527659ded0174215814798afbbe615dfe5012b9def89e9d9f2bcbd5
MD5 7e32e5302b4bb8c73acad0f9d1733e40
SHA1 c8f0463bf13e431c5801785abd8beeaa04bd3b78
SHA512 2b23382528848828872322d988fa6210ab02e8c970f61e608da0682fe11d85665a78852cdedf058242d4d5883bd467d864ba81e854baabfbff1f221ddda3a2f6
SSDEEP 98304:32X95deLTqs4NowML3II7nsSOAzgrq5O62Aq1muFww8:3o9X8qsSgMInZOAzgrqs6M0Nr
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  6be4950d9a919f5d0150d19552b340e9b5ef1959a18fd97b18778bf39e1a6421.exe
- Size 4.5MB
- SHA256 6be4950d9a919f5d0150d19552b340e9b5ef1959a18fd97b18778bf39e1a6421
- MD5 20ed8b8eb556fa3cbc88b83882a6f1b0
- SHA1 cd7ce6fc0068b6ef9c37d5dafec1319a39b88709
- SHA512 868b859bdff27e41f63b527590214ad22dcaf332bb3d5c7daafd295ea648d71d5bd6d01fee29587eee8b7d4ef01384089eb0b2408f3d2e048021701c357e3b9b
- SSDEEP 98304:in1GhDYSAEbWAtdt7Eea0+JJHOBMT6yCltq5CFvxWof8e45D4UO38cYd5:0gYfux7EF0CHqI6Xg5CFvxW2Pe
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

spyware stealer
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
- Drops file in System32 directory
behavioral1 behavioral2 behavioral3 behavioral4

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Checks computer location settings

Reads user/profile data of web browsers

Looks up external IP address via web service

Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4