Overview

overview

7

Static

static

3

4ffa10be9f...5d.exe

windows7-x64

7

4ffa10be9f...5d.exe

windows10-2004-x64

4

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4ffa10be9fc7fd0b757e23f4629e6b7bb41fdb89de41f975e69bada95aec795d

  • Size

    1.8MB

  • Sample

    240428-pez4tsfe58

  • MD5

    286788dc23c0df90b405583ead346211

  • SHA1

    a34f2074f6a0725d511cb012896f5fed786df7bc

  • SHA256

    4ffa10be9fc7fd0b757e23f4629e6b7bb41fdb89de41f975e69bada95aec795d

  • SHA512

    29080bc5863a5797cfa06131e3b665ce53ee1c7de79fbf71ae36eff84774358c955bb9590c51c571dc52824f031ce40b684a4ff2748a194b78b61720208bb5d3

  • SSDEEP

    49152:Mx5SUW/cxUitIGLsF0nb+tJVYleAMz77+WA3Dmg27RnWGj:MvbjVkjjCAzJmD527BWG

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      4ffa10be9fc7fd0b757e23f4629e6b7bb41fdb89de41f975e69bada95aec795d

    • Size

      1.8MB

    • MD5

      286788dc23c0df90b405583ead346211

    • SHA1

      a34f2074f6a0725d511cb012896f5fed786df7bc

    • SHA256

      4ffa10be9fc7fd0b757e23f4629e6b7bb41fdb89de41f975e69bada95aec795d

    • SHA512

      29080bc5863a5797cfa06131e3b665ce53ee1c7de79fbf71ae36eff84774358c955bb9590c51c571dc52824f031ce40b684a4ff2748a194b78b61720208bb5d3

    • SSDEEP

      49152:Mx5SUW/cxUitIGLsF0nb+tJVYleAMz77+WA3Dmg27RnWGj:MvbjVkjjCAzJmD527BWG

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks