Overview

overview

7

Static

static

3

b18efbbeeb...45.exe

windows7-x64

1

b18efbbeeb...45.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b18efbbeebeb0dc69161105bc389b0a5d35b668f058a5e3c0433ddfb291d6745

  • Size

    705KB

  • Sample

    240419-278mwsah8s

  • MD5

    2d29e1ad8c26395401928b698a26cba8

  • SHA1

    f5ea9b0c098c764c3b60cc7f30634cc11ce6f95e

  • SHA256

    b18efbbeebeb0dc69161105bc389b0a5d35b668f058a5e3c0433ddfb291d6745

  • SHA512

    6180e5ce1b26e4f66937eb7b6d8a055e566703070f29c0800e5d62766d47218217671ba240869fc7485ed3b7ae3d84d9f3e470abedba2047591c044d0f687ff6

  • SSDEEP

    12288:mW9B+V8Gt/sB1KcYmqgZvAMlUoUjG+YKtMfnkOeZb5JYiNAgAPhc:mW9B6t/sBlDqgZQd6XKtiMJYiPUc

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      b18efbbeebeb0dc69161105bc389b0a5d35b668f058a5e3c0433ddfb291d6745

    • Size

      705KB

    • MD5

      2d29e1ad8c26395401928b698a26cba8

    • SHA1

      f5ea9b0c098c764c3b60cc7f30634cc11ce6f95e

    • SHA256

      b18efbbeebeb0dc69161105bc389b0a5d35b668f058a5e3c0433ddfb291d6745

    • SHA512

      6180e5ce1b26e4f66937eb7b6d8a055e566703070f29c0800e5d62766d47218217671ba240869fc7485ed3b7ae3d84d9f3e470abedba2047591c044d0f687ff6

    • SSDEEP

      12288:mW9B+V8Gt/sB1KcYmqgZvAMlUoUjG+YKtMfnkOeZb5JYiNAgAPhc:mW9B6t/sBlDqgZQd6XKtiMJYiPUc

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

2
T1082

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks