Overview

overview

7

Static

static

3

baf3d29856...02.exe

windows7-x64

7

baf3d29856...02.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    baf3d298562bcf538fcc8c1e9a601e8a996cea287d47d0ff94f0b14e1d1e9002

  • Size

    1.2MB

  • Sample

    240419-159azahg4z

  • MD5

    fc2bd69ac53be59ad99cee394d0de995

  • SHA1

    7192bb283bade662411e8ebdd2c260bc2e9bfe1f

  • SHA256

    baf3d298562bcf538fcc8c1e9a601e8a996cea287d47d0ff94f0b14e1d1e9002

  • SHA512

    ab67387113b1ac0d284f35dc874a420b44a9efe76590e3e03270db6666d813d7e6b71dec12673abfadf3a84a09e4923bbb8db6b7a3e1c5467a492f47d60e2b43

  • SSDEEP

    12288:a9iB+t6+RxfG9AHufIUiPQC8MmnCrmKTrXiboX2xZj59Vq658U8n8:a9iBtYG8ufYQC82TzaoX2xZj5zqa

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      baf3d298562bcf538fcc8c1e9a601e8a996cea287d47d0ff94f0b14e1d1e9002

    • Size

      1.2MB

    • MD5

      fc2bd69ac53be59ad99cee394d0de995

    • SHA1

      7192bb283bade662411e8ebdd2c260bc2e9bfe1f

    • SHA256

      baf3d298562bcf538fcc8c1e9a601e8a996cea287d47d0ff94f0b14e1d1e9002

    • SHA512

      ab67387113b1ac0d284f35dc874a420b44a9efe76590e3e03270db6666d813d7e6b71dec12673abfadf3a84a09e4923bbb8db6b7a3e1c5467a492f47d60e2b43

    • SSDEEP

      12288:a9iB+t6+RxfG9AHufIUiPQC8MmnCrmKTrXiboX2xZj59Vq658U8n8:a9iBtYG8ufYQC82TzaoX2xZj5zqa

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks