Overview

overview

7

Static

static

3

7cbb4e6e7e...93.exe

windows7-x64

7

7cbb4e6e7e...93.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7cbb4e6e7efc10b61e1acfdfc7ec68746fbbef453373dc94abd16fec39812993

  • Size

    648KB

  • Sample

    240428-22wfdabg21

  • MD5

    a98cc0044d4852cd4ed4d1e6c5054dcf

  • SHA1

    ccd77ce023a0c3c8ea8ff118588cda73f43131bd

  • SHA256

    7cbb4e6e7efc10b61e1acfdfc7ec68746fbbef453373dc94abd16fec39812993

  • SHA512

    efe5d971bfd34a5258f15211bec0706af5a85fc34a98ec283b16fa3ff4d5cfdd4d5d716555ea8257c6f028f60ceaba4cf0a6549216b26c9ab049e53fc4ce641e

  • SSDEEP

    12288:/qz2DWURFqXCRQSjMU3O5s+N6NhOlFVlVsTot16+DrgAPs4F2Y7YJba2EUYhsp+Z:yz2DWnSRQ5UOOU62FBnO+E222YJbNEUT

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      7cbb4e6e7efc10b61e1acfdfc7ec68746fbbef453373dc94abd16fec39812993

    • Size

      648KB

    • MD5

      a98cc0044d4852cd4ed4d1e6c5054dcf

    • SHA1

      ccd77ce023a0c3c8ea8ff118588cda73f43131bd

    • SHA256

      7cbb4e6e7efc10b61e1acfdfc7ec68746fbbef453373dc94abd16fec39812993

    • SHA512

      efe5d971bfd34a5258f15211bec0706af5a85fc34a98ec283b16fa3ff4d5cfdd4d5d716555ea8257c6f028f60ceaba4cf0a6549216b26c9ab049e53fc4ce641e

    • SSDEEP

      12288:/qz2DWURFqXCRQSjMU3O5s+N6NhOlFVlVsTot16+DrgAPs4F2Y7YJba2EUYhsp+Z:yz2DWnSRQ5UOOU62FBnO+E222YJbNEUT

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

System Information Discovery

3
T1082

Query Registry

3
T1012

Peripheral Device Discovery

1
T1120

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks