General

  • Target

    2024-04-28_44936638e583bdfec2660ff6e99fe6e7_avoslocker

  • Size

    1.3MB

  • Sample

    240428-m22j3aed3s

  • MD5

    44936638e583bdfec2660ff6e99fe6e7

  • SHA1

    38314b0ff5305c3d8b71856b95bc8ddf2a7b6a48

  • SHA256

    1f053b550c6e930fc8eca953e93d3434ae6786b18aae44f91c098b5a56e56d53

  • SHA512

    662bd6bb6bbb8e751d20f08a8df64b7dc6afaeff5c302e11e51dc425123194ce52e6b8d018d70db59d04caf6350ca4d3d2e4444b35373ea810d6fe1e6c2b9c74

  • SSDEEP

    24576:K2zEYytjjqNSlhvpfQiIhKPtehfQ7r9qySkbgedQRVldlnXfH9gPwCn7vOb7HHcg:KPtjtQiIhUyQd1SkFdQRVlbnXf9gPTTg

Score
7/10

Malware Config

Targets

    • Target

      2024-04-28_44936638e583bdfec2660ff6e99fe6e7_avoslocker

    • Size

      1.3MB

    • MD5

      44936638e583bdfec2660ff6e99fe6e7

    • SHA1

      38314b0ff5305c3d8b71856b95bc8ddf2a7b6a48

    • SHA256

      1f053b550c6e930fc8eca953e93d3434ae6786b18aae44f91c098b5a56e56d53

    • SHA512

      662bd6bb6bbb8e751d20f08a8df64b7dc6afaeff5c302e11e51dc425123194ce52e6b8d018d70db59d04caf6350ca4d3d2e4444b35373ea810d6fe1e6c2b9c74

    • SSDEEP

      24576:K2zEYytjjqNSlhvpfQiIhKPtehfQ7r9qySkbgedQRVldlnXfH9gPwCn7vOb7HHcg:KPtjtQiIhUyQd1SkFdQRVlbnXf9gPTTg

    Score
    7/10
    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

System Information Discovery

3
T1082

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

Collection

Data from Local System

1
T1005

Tasks