Overview

overview

7

Static

static

3

21c8dd6c72...59.dll

windows7-x64

7

21c8dd6c72...59.dll

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    21c8dd6c720928e7fd9f0ed914a3dfff29b240a1b647ea6929c0b881ca485759

  • Size

    1.6MB

  • Sample

    240428-x2s8ssfa28

  • MD5

    af9c842e1fb7c7c19e2adaaaab745353

  • SHA1

    943152839af8595fa94009f28940b371c0f9316e

  • SHA256

    21c8dd6c720928e7fd9f0ed914a3dfff29b240a1b647ea6929c0b881ca485759

  • SHA512

    0cea1e55abca6ce6577c41d0f15804a15715dfbbf0c90e8f3bf0e76857329ab9336b016265399cd8c6ede8efab80068f853e9e775a382a8a779d5c6f21b2fc17

  • SSDEEP

    49152:bbK8Jw9oCKTmlkaTDnokjscqnT+8ZIlwVHkm:buai/Az1ZIlwh/

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      21c8dd6c720928e7fd9f0ed914a3dfff29b240a1b647ea6929c0b881ca485759

    • Size

      1.6MB

    • MD5

      af9c842e1fb7c7c19e2adaaaab745353

    • SHA1

      943152839af8595fa94009f28940b371c0f9316e

    • SHA256

      21c8dd6c720928e7fd9f0ed914a3dfff29b240a1b647ea6929c0b881ca485759

    • SHA512

      0cea1e55abca6ce6577c41d0f15804a15715dfbbf0c90e8f3bf0e76857329ab9336b016265399cd8c6ede8efab80068f853e9e775a382a8a779d5c6f21b2fc17

    • SSDEEP

      49152:bbK8Jw9oCKTmlkaTDnokjscqnT+8ZIlwVHkm:buai/Az1ZIlwh/

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks