Overview

overview

10

Static

static

10

Ro Executer.exe

windows11-21h2-x64

8

��7c�w.pyc

windows11-21h2-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Ro Executer.exe

  • Size

    6.9MB

  • Sample

    240416-jsyj9sch47

  • MD5

    caeca581ae6ebb0abed669c95b38fe30

  • SHA1

    b32c569981534824f97721e0c9de7a6cccceb2d1

  • SHA256

    94021b69a29f54f725f3ba5210ee7fdfb8ac29d622fc0cb58bad953d4697f268

  • SHA512

    0c27ff0ce21fca3a8e1dbe38a1f66a591e180146838aa9bbed3886490ac944f9090c7dd7084c4a488415bc957e1534a220486748cbe2fbbc795e6233286b3448

  • SSDEEP

    98304:UReDjWM8JEE1rybamaHl3Ne4i3Tf2PkOpfW9hZMMoVmkzhxIdfXeR8YKJJcGhEIZ:Us0/eNTfm/pf+xk4dWR8trbWOjgs+k

Score
10/10
blankgrabberspywarestealerupx

Malware Config

Targets

    • Target

      Ro Executer.exe

    • Size

      6.9MB

    • MD5

      caeca581ae6ebb0abed669c95b38fe30

    • SHA1

      b32c569981534824f97721e0c9de7a6cccceb2d1

    • SHA256

      94021b69a29f54f725f3ba5210ee7fdfb8ac29d622fc0cb58bad953d4697f268

    • SHA512

      0c27ff0ce21fca3a8e1dbe38a1f66a591e180146838aa9bbed3886490ac944f9090c7dd7084c4a488415bc957e1534a220486748cbe2fbbc795e6233286b3448

    • SSDEEP

      98304:UReDjWM8JEE1rybamaHl3Ne4i3Tf2PkOpfW9hZMMoVmkzhxIdfXeR8YKJJcGhEIZ:Us0/eNTfm/pf+xk4dWR8trbWOjgs+k

    Score
    8/10
    spywarestealerupx

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1

    • Target

      ��7c�w.pyc

    • Size

      1KB

    • MD5

      f5045376f6e758441ca8af52ddd663af

    • SHA1

      d017ea7326fa99c47b687d40086b1964145704d1

    • SHA256

      ae94716a7902f04c0ea2ba5b6a3c7efef84b824d8fefbba3bc38ba29bcc856bc

    • SHA512

      934de8c8b006a9b4a3f0d6ef547fdf404f508dc38a6c1df74aea354b834ba6fc776a7035a6604808b072863e7f8fb55ca662a8ae15eaf60ae79ba0f14bf6b86b

    Score
    1/10
    behavioral2

MITRE ATT&CK Enterprise v15

Tasks