Overview

overview

7

Static

static

3

0c9287ac06...46.exe

windows7-x64

7

0c9287ac06...46.exe

windows10-2004-x64

4

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0c9287ac062d55a303ceb95d4f948f9fd8bd1f50b31a597506d73a51547e0046

  • Size

    1.8MB

  • Sample

    240428-pe287afe63

  • MD5

    ac79bd6f7610d78a7b1656c7cadaa74d

  • SHA1

    5910c487c15f298f6de6db37e0b0aee4ccfeb920

  • SHA256

    0c9287ac062d55a303ceb95d4f948f9fd8bd1f50b31a597506d73a51547e0046

  • SHA512

    0593c9c1c7307be5cbb608709cf3c2dbdbf5a8234a4a2552ea7bb86a7bd06b9fda18777c53c878f78009b877733e810fdca7312c30d1bebc7fb01604ecf6bee2

  • SSDEEP

    49152:qx5SUW/cxUitIGLsF0nb+tJVYleAMz77+WAVDmg27RnWGj:qvbjVkjjCAzJQD527BWG

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      0c9287ac062d55a303ceb95d4f948f9fd8bd1f50b31a597506d73a51547e0046

    • Size

      1.8MB

    • MD5

      ac79bd6f7610d78a7b1656c7cadaa74d

    • SHA1

      5910c487c15f298f6de6db37e0b0aee4ccfeb920

    • SHA256

      0c9287ac062d55a303ceb95d4f948f9fd8bd1f50b31a597506d73a51547e0046

    • SHA512

      0593c9c1c7307be5cbb608709cf3c2dbdbf5a8234a4a2552ea7bb86a7bd06b9fda18777c53c878f78009b877733e810fdca7312c30d1bebc7fb01604ecf6bee2

    • SSDEEP

      49152:qx5SUW/cxUitIGLsF0nb+tJVYleAMz77+WAVDmg27RnWGj:qvbjVkjjCAzJQD527BWG

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks