Overview

overview

7

Static

static

3

loader.exe

windows7-x64

7

loader.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    loader.exe

  • Size

    43.3MB

  • Sample

    240419-3fkmesac63

  • MD5

    2378c4bb785e02e88edd6a65779452f4

  • SHA1

    d17b6ceb52838a74a3d864072c049bde5977e35e

  • SHA256

    65813b80db56da93c374e4443342d1f939fe3ba87fc1271e9ef6eb38c1378ed0

  • SHA512

    e43d74804875f9fbfd9038a3a76e938650373a399dac9444b9a8a8b383f7fe57d1ec038b67725ac2d6149e75d5dd26247532a2e812e8725a0e2fcf6feb6fe935

  • SSDEEP

    786432:V2PR5TYC+9szfm0yb3OHzeMKVxzx5YQj7wuf9P55f2RJsU0igqW8dVnyd8zw:0PrYC+Uob3OHzDCd5YQj7wkFPf2b46WN

Score
7/10
discoverypyinstallerspywarestealer

Malware Config

Targets

    • Target

      loader.exe

    • Size

      43.3MB

    • MD5

      2378c4bb785e02e88edd6a65779452f4

    • SHA1

      d17b6ceb52838a74a3d864072c049bde5977e35e

    • SHA256

      65813b80db56da93c374e4443342d1f939fe3ba87fc1271e9ef6eb38c1378ed0

    • SHA512

      e43d74804875f9fbfd9038a3a76e938650373a399dac9444b9a8a8b383f7fe57d1ec038b67725ac2d6149e75d5dd26247532a2e812e8725a0e2fcf6feb6fe935

    • SSDEEP

      786432:V2PR5TYC+9szfm0yb3OHzeMKVxzx5YQj7wuf9P55f2RJsU0igqW8dVnyd8zw:0PrYC+Uob3OHzDCd5YQj7wkFPf2b46WN

    Score
    7/10
    discoveryspywarestealer

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

Query Registry

3
T1012

System Information Discovery

3
T1082

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks