Overview

overview

7

Static

static

3

a7a5b9dd5f...a6.exe

windows7-x64

7

a7a5b9dd5f...a6.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a7a5b9dd5f890575cbe85b895eaf77fb3dcc08e380443e41ac8fcbabf81b0fa6

  • Size

    5.7MB

  • Sample

    240427-k7xrysfd72

  • MD5

    24ef411df0ca975da61f3ff526e5e880

  • SHA1

    de990b1eb983137de8ce4baf8615f207764b1126

  • SHA256

    a7a5b9dd5f890575cbe85b895eaf77fb3dcc08e380443e41ac8fcbabf81b0fa6

  • SHA512

    f4050ee4789bfb0bc602fff4a1606bd94badb2dde8a0fc3b5b21fdfd1000a38630375d29050ea7fed7e4727aa25e6da324a25149304c01991b9c603db896b3b8

  • SSDEEP

    49152:hBCPv94AEsKU8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvc8ixuZm9+fWsw6dTP:haKUgTH2M2m9UMpu1QfLczqssnKSk

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      a7a5b9dd5f890575cbe85b895eaf77fb3dcc08e380443e41ac8fcbabf81b0fa6

    • Size

      5.7MB

    • MD5

      24ef411df0ca975da61f3ff526e5e880

    • SHA1

      de990b1eb983137de8ce4baf8615f207764b1126

    • SHA256

      a7a5b9dd5f890575cbe85b895eaf77fb3dcc08e380443e41ac8fcbabf81b0fa6

    • SHA512

      f4050ee4789bfb0bc602fff4a1606bd94badb2dde8a0fc3b5b21fdfd1000a38630375d29050ea7fed7e4727aa25e6da324a25149304c01991b9c603db896b3b8

    • SSDEEP

      49152:hBCPv94AEsKU8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvc8ixuZm9+fWsw6dTP:haKUgTH2M2m9UMpu1QfLczqssnKSk

    Score
    7/10
    spywarestealer

    • Deletes itself

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks