Overview

overview

7

Static

static

3

09fbdd2a0c...d5.exe

windows7-x64

7

09fbdd2a0c...d5.exe

windows10-2004-x64

4

Sharing

Copy URL
Twitter E-mail

General

  • Target

    09fbdd2a0cae61ca1a30c49e323d8f4d422086f49acffbcb5ab3b1c0ced65dd5

  • Size

    1.8MB

  • Sample

    240416-bhh3tsdd32

  • MD5

    5acd761262a6710071cff6831c0a0d9c

  • SHA1

    04ea0ba5d7d3ea4ee07396966de25422385ac27a

  • SHA256

    09fbdd2a0cae61ca1a30c49e323d8f4d422086f49acffbcb5ab3b1c0ced65dd5

  • SHA512

    0b95aea5ac8fb9d9da3c377c4769a9cddb27458f083a6c0c27550ada065b3acefcb52a6362820810627d71cc02cc54d7a25b8692cb09e9d8dba0903a64990f24

  • SSDEEP

    49152:rx5SUW/cxUitIGLsF0nb+tJVYleAMz77+WA+/ymNrK7R4:rvbjVkjjCAzJRyIIR4

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      09fbdd2a0cae61ca1a30c49e323d8f4d422086f49acffbcb5ab3b1c0ced65dd5

    • Size

      1.8MB

    • MD5

      5acd761262a6710071cff6831c0a0d9c

    • SHA1

      04ea0ba5d7d3ea4ee07396966de25422385ac27a

    • SHA256

      09fbdd2a0cae61ca1a30c49e323d8f4d422086f49acffbcb5ab3b1c0ced65dd5

    • SHA512

      0b95aea5ac8fb9d9da3c377c4769a9cddb27458f083a6c0c27550ada065b3acefcb52a6362820810627d71cc02cc54d7a25b8692cb09e9d8dba0903a64990f24

    • SSDEEP

      49152:rx5SUW/cxUitIGLsF0nb+tJVYleAMz77+WA+/ymNrK7R4:rvbjVkjjCAzJRyIIR4

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks