Overview

overview

7

Static

static

3

d1baa29c28...5b.exe

windows7-x64

1

d1baa29c28...5b.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d1baa29c28939bdd017c051ad27e127be68b016e28a4e146e32dff190d52aa5b

  • Size

    716KB

  • Sample

    240418-p9y51seh9t

  • MD5

    63224479ffbd8f13c1b25b71691f3665

  • SHA1

    efb316f9221d4a2d4f3417ca4d7d721e98c2563a

  • SHA256

    d1baa29c28939bdd017c051ad27e127be68b016e28a4e146e32dff190d52aa5b

  • SHA512

    06ad00920898e69c0d834c1b8c886cb2bfef22cad11f86ec34d01ca7de6be77c6927bc34a9cb80c61b305e8051e82788bfe95a93e333a7dd487427a950553de7

  • SSDEEP

    12288:M3P/aK2vB+fFCrNDFKYmKIiirRGW2phzrvXuayM1J3AAlrAf0d83QC0OXxcpGHM5:M/CKABq8NDFKYmKOF0zr31JwAlcR3QCx

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      d1baa29c28939bdd017c051ad27e127be68b016e28a4e146e32dff190d52aa5b

    • Size

      716KB

    • MD5

      63224479ffbd8f13c1b25b71691f3665

    • SHA1

      efb316f9221d4a2d4f3417ca4d7d721e98c2563a

    • SHA256

      d1baa29c28939bdd017c051ad27e127be68b016e28a4e146e32dff190d52aa5b

    • SHA512

      06ad00920898e69c0d834c1b8c886cb2bfef22cad11f86ec34d01ca7de6be77c6927bc34a9cb80c61b305e8051e82788bfe95a93e333a7dd487427a950553de7

    • SSDEEP

      12288:M3P/aK2vB+fFCrNDFKYmKIiirRGW2phzrvXuayM1J3AAlrAf0d83QC0OXxcpGHM5:M/CKABq8NDFKYmKOF0zr31JwAlcR3QCx

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks