Overview

overview

7

Static

static

3

e2ff7b7c4d...1e.exe

windows7-x64

7

e2ff7b7c4d...1e.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e2ff7b7c4dbf040cf2f3f335124a03163e3354049e5c793d03f14e90f7aaee1e

  • Size

    1.8MB

  • Sample

    240428-drzhaafb9v

  • MD5

    3bd0dd84e3118a97bf4b814ab0edadd3

  • SHA1

    fd38fef8d0c8bde5e3db51517184be4f0c93cb6c

  • SHA256

    e2ff7b7c4dbf040cf2f3f335124a03163e3354049e5c793d03f14e90f7aaee1e

  • SHA512

    9aca6a1bf2c010b88d54410325e4e3ba06ec4d892090b0ea2254f951a46c045696b782af6b2dc382a608ddb93cd1df1767a5e731f1e84644b2ceadf8900a7c34

  • SSDEEP

    49152:mx5SUW/cxUitIGLsF0nb+tJVYleAMz77+WApgDUYmvFur31yAipQCtXxc0H:mvbjVkjjCAzJ7U7dG1yfpVBlH

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      e2ff7b7c4dbf040cf2f3f335124a03163e3354049e5c793d03f14e90f7aaee1e

    • Size

      1.8MB

    • MD5

      3bd0dd84e3118a97bf4b814ab0edadd3

    • SHA1

      fd38fef8d0c8bde5e3db51517184be4f0c93cb6c

    • SHA256

      e2ff7b7c4dbf040cf2f3f335124a03163e3354049e5c793d03f14e90f7aaee1e

    • SHA512

      9aca6a1bf2c010b88d54410325e4e3ba06ec4d892090b0ea2254f951a46c045696b782af6b2dc382a608ddb93cd1df1767a5e731f1e84644b2ceadf8900a7c34

    • SSDEEP

      49152:mx5SUW/cxUitIGLsF0nb+tJVYleAMz77+WApgDUYmvFur31yAipQCtXxc0H:mvbjVkjjCAzJ7U7dG1yfpVBlH

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks