Overview

overview

8

Static

static

3

ff6c568219...5d.exe

windows7-x64

8

ff6c568219...5d.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    ff6c568219acae1ab2024565d4c56167871222bfe5846f5cc5785b1f4e0d805d

  • Size

    1.8MB

  • Sample

    240418-bmxrsagb5x

  • MD5

    0801781ac477f8cc7c91b676c3b6efa6

  • SHA1

    20e8c095b7a50822b363ba174c117635795161f5

  • SHA256

    ff6c568219acae1ab2024565d4c56167871222bfe5846f5cc5785b1f4e0d805d

  • SHA512

    7554c854bdffb27ff8d359157aa089077535b2271724d3f290cffa9dca549cea1f4988dc9d45b483ccf277ced0325706ead3049ad637e4e60c8b5c3e9bcde581

  • SSDEEP

    24576:F3vLR2VhZBJ905EmMyPnQxhe4iLwvHYgUBoHyC/hR:F3dUZTHGLAl

Score
8/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      ff6c568219acae1ab2024565d4c56167871222bfe5846f5cc5785b1f4e0d805d

    • Size

      1.8MB

    • MD5

      0801781ac477f8cc7c91b676c3b6efa6

    • SHA1

      20e8c095b7a50822b363ba174c117635795161f5

    • SHA256

      ff6c568219acae1ab2024565d4c56167871222bfe5846f5cc5785b1f4e0d805d

    • SHA512

      7554c854bdffb27ff8d359157aa089077535b2271724d3f290cffa9dca549cea1f4988dc9d45b483ccf277ced0325706ead3049ad637e4e60c8b5c3e9bcde581

    • SSDEEP

      24576:F3vLR2VhZBJ905EmMyPnQxhe4iLwvHYgUBoHyC/hR:F3dUZTHGLAl

    Score
    8/10
    discoveryspywarestealer

    • Drops file in Drivers directory

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks