Overview

overview

8

Static

static

3

5960298eda...37.exe

windows7-x64

8

5960298eda...37.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    5960298edaaa00fa32db8f1c24bae6c8cd081e737f695aa177eae3c1f1717237

  • Size

    5.7MB

  • Sample

    240425-g5w6vsgd95

  • MD5

    0b3d93cad050c9f35994c1d39db46181

  • SHA1

    d947c3e202d6dd9704e39ff4fe3d8cad038aaf90

  • SHA256

    5960298edaaa00fa32db8f1c24bae6c8cd081e737f695aa177eae3c1f1717237

  • SHA512

    ccdc1d4dc42fb3e51e380cc8cbee8933c2197db193561d911ed06a0246587e0caecfd488213eaf67afe3f9381ac42cc65f3616b3dbb008dd3d0c19dc48ebc8d5

  • SSDEEP

    49152:+d+Pv94AEsKU8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvc8ixuZm9+fWsw6dTP:+dAKUgTH2M2m9UMpu1QfLczqssnKSk

Score
8/10
spywarestealer

Malware Config

Targets

    • Target

      5960298edaaa00fa32db8f1c24bae6c8cd081e737f695aa177eae3c1f1717237

    • Size

      5.7MB

    • MD5

      0b3d93cad050c9f35994c1d39db46181

    • SHA1

      d947c3e202d6dd9704e39ff4fe3d8cad038aaf90

    • SHA256

      5960298edaaa00fa32db8f1c24bae6c8cd081e737f695aa177eae3c1f1717237

    • SHA512

      ccdc1d4dc42fb3e51e380cc8cbee8933c2197db193561d911ed06a0246587e0caecfd488213eaf67afe3f9381ac42cc65f3616b3dbb008dd3d0c19dc48ebc8d5

    • SSDEEP

      49152:+d+Pv94AEsKU8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvc8ixuZm9+fWsw6dTP:+dAKUgTH2M2m9UMpu1QfLczqssnKSk

    Score
    8/10
    spywarestealer

    • Drops file in Drivers directory

    • Deletes itself

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks