General

  • Target

    2024-04-28_a01362718d2c8a8ec25449b118d3eddf_avoslocker

  • Size

    1.3MB

  • Sample

    240428-xljdnaeg4s

  • MD5

    a01362718d2c8a8ec25449b118d3eddf

  • SHA1

    b52440f57b8e0a9a2e152aedbf940c0a64a5895c

  • SHA256

    961c6f48a263a30a63dda8f2f3ed36ad340daa21e744dbe21470fca24e6ba928

  • SHA512

    179f76d4f30c7cc76e8f1093807cb2c69b66e88ac60b65d9c102efaeab4e0b652189693520faa207a7b558c6e33898ac2ea72f83253b62b1d1f6c5032cf0beac

  • SSDEEP

    24576:k2zEYytjjqNSlhvpfQiIhKPtehfQ7r9qySkbgedDRVldlnXfH9gPwCn7vOb7HHcg:kPtjtQiIhUyQd1SkFdDRVlbnXf9gPTTg

Score
7/10

Malware Config

Targets

    • Target

      2024-04-28_a01362718d2c8a8ec25449b118d3eddf_avoslocker

    • Size

      1.3MB

    • MD5

      a01362718d2c8a8ec25449b118d3eddf

    • SHA1

      b52440f57b8e0a9a2e152aedbf940c0a64a5895c

    • SHA256

      961c6f48a263a30a63dda8f2f3ed36ad340daa21e744dbe21470fca24e6ba928

    • SHA512

      179f76d4f30c7cc76e8f1093807cb2c69b66e88ac60b65d9c102efaeab4e0b652189693520faa207a7b558c6e33898ac2ea72f83253b62b1d1f6c5032cf0beac

    • SSDEEP

      24576:k2zEYytjjqNSlhvpfQiIhKPtehfQ7r9qySkbgedDRVldlnXfH9gPwCn7vOb7HHcg:kPtjtQiIhUyQd1SkFdDRVlbnXf9gPTTg

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

System Information Discovery

3
T1082

Query Registry

3
T1012

Peripheral Device Discovery

1
T1120

Collection

Data from Local System

1
T1005

Tasks