Overview

overview

7

Static

static

3

afe9f73c62...0a.exe

windows7-x64

1

afe9f73c62...0a.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    afe9f73c62cd470bce021f27a33e0b67f28cd132a126f913a8f4293e1c420d0a

  • Size

    716KB

  • Sample

    240428-crra8sed9t

  • MD5

    8be61d2a325f74a40cd13aed1078eddd

  • SHA1

    b7a00105d6ca3c5b094d5168f0f1e32ca682a5d5

  • SHA256

    afe9f73c62cd470bce021f27a33e0b67f28cd132a126f913a8f4293e1c420d0a

  • SHA512

    26ea2070b2efcb9f8d1f8d359db5c7f4313ad52daf283f419708ac1932b7bb95e069996072444180f67dbc213c208f41d308a14e5e7059a8d04b2aff2aa82f91

  • SSDEEP

    12288:p3P/aK2vB+vYlc+pFByStv9JRa//inz86NRo1qiRlUWC4kXzVC3:p/CKABZc+pFB5z+//ufNRoZW

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      afe9f73c62cd470bce021f27a33e0b67f28cd132a126f913a8f4293e1c420d0a

    • Size

      716KB

    • MD5

      8be61d2a325f74a40cd13aed1078eddd

    • SHA1

      b7a00105d6ca3c5b094d5168f0f1e32ca682a5d5

    • SHA256

      afe9f73c62cd470bce021f27a33e0b67f28cd132a126f913a8f4293e1c420d0a

    • SHA512

      26ea2070b2efcb9f8d1f8d359db5c7f4313ad52daf283f419708ac1932b7bb95e069996072444180f67dbc213c208f41d308a14e5e7059a8d04b2aff2aa82f91

    • SSDEEP

      12288:p3P/aK2vB+vYlc+pFByStv9JRa//inz86NRo1qiRlUWC4kXzVC3:p/CKABZc+pFB5z+//ufNRoZW

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks