Overview

overview

7

Static

static

3

2c0655f182...24.exe

windows7-x64

7

2c0655f182...24.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2c0655f182a79f7836181e00c2c7ac01843faacd9c377a56a4d2e1a88ff9e324

  • Size

    66KB

  • Sample

    240428-y1b4kagd61

  • MD5

    30fb5b75c4ae0f6dfdd5d440337a7c35

  • SHA1

    affb20207aeb19153c12133a96b961d9009ac21b

  • SHA256

    2c0655f182a79f7836181e00c2c7ac01843faacd9c377a56a4d2e1a88ff9e324

  • SHA512

    08fd5368e55cb3a3bc443f083d3557e9ca33e57981665242b21c574bcf1794349990f58a4ffa25b7dd446110a7bc82b88e7a6a5391ae412bc6474d3419c3b7d4

  • SSDEEP

    1536:/qbSe+Zk78NR3dN5nPEawuzXv4exFRKs9uhh:/3e+a+3dN5MawuzX+kuX

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2c0655f182a79f7836181e00c2c7ac01843faacd9c377a56a4d2e1a88ff9e324

    • Size

      66KB

    • MD5

      30fb5b75c4ae0f6dfdd5d440337a7c35

    • SHA1

      affb20207aeb19153c12133a96b961d9009ac21b

    • SHA256

      2c0655f182a79f7836181e00c2c7ac01843faacd9c377a56a4d2e1a88ff9e324

    • SHA512

      08fd5368e55cb3a3bc443f083d3557e9ca33e57981665242b21c574bcf1794349990f58a4ffa25b7dd446110a7bc82b88e7a6a5391ae412bc6474d3419c3b7d4

    • SSDEEP

      1536:/qbSe+Zk78NR3dN5nPEawuzXv4exFRKs9uhh:/3e+a+3dN5MawuzX+kuX

    Score
    7/10
    spywarestealer

    • Deletes itself

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks