Overview

overview

10

Static

static

10

15954d6dd4...fa.exe

windows7-x64

9

15954d6dd4...fa.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    15954d6dd4bca0876f18f7c32467f238bc87845bedfa3841f212236824ae60fa

  • Size

    216KB

  • Sample

    240422-xr79zaeh9s

  • MD5

    00d6d6e2eb8d7833eb5fe515858fbde3

  • SHA1

    3028cbd4ff12c905c283dc6748be94448b1f1e3e

  • SHA256

    15954d6dd4bca0876f18f7c32467f238bc87845bedfa3841f212236824ae60fa

  • SHA512

    ab7a13c1011ca899325967939833c8159c4348ae9213f05c58011144a868a105b64e8883db4d609df6a01e60029bf439e4a58e71f972755d287250db2fa155a9

  • SSDEEP

    3072:SPUHpiKT2t2UHIu05W7SAFJJOUD9cckiKop97f3r8n9t9YgntwM:/rTfUHeeSKOS9ccFKk3Y9t9YZM

Score
10/10
persistencespywarestealer

Malware Config

Targets

    • Target

      15954d6dd4bca0876f18f7c32467f238bc87845bedfa3841f212236824ae60fa

    • Size

      216KB

    • MD5

      00d6d6e2eb8d7833eb5fe515858fbde3

    • SHA1

      3028cbd4ff12c905c283dc6748be94448b1f1e3e

    • SHA256

      15954d6dd4bca0876f18f7c32467f238bc87845bedfa3841f212236824ae60fa

    • SHA512

      ab7a13c1011ca899325967939833c8159c4348ae9213f05c58011144a868a105b64e8883db4d609df6a01e60029bf439e4a58e71f972755d287250db2fa155a9

    • SSDEEP

      3072:SPUHpiKT2t2UHIu05W7SAFJJOUD9cckiKop97f3r8n9t9YgntwM:/rTfUHeeSKOS9ccFKk3Y9t9YZM

    Score
    9/10
    persistencespywarestealer

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks