Overview

overview

7

Static

static

3

50e071c7c5...50.exe

windows7-x64

7

50e071c7c5...50.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    50e071c7c52b8f79bcc7862073b3fe0296b6e977db5b538d33e128c52d916650

  • Size

    93KB

  • Sample

    240428-y25ghage4t

  • MD5

    a676c871f859984d67661a29da7e591d

  • SHA1

    645a33ab03829ae16a5a8061d3eecd45fdc98e6f

  • SHA256

    50e071c7c52b8f79bcc7862073b3fe0296b6e977db5b538d33e128c52d916650

  • SHA512

    00c27c8eeb4a2dac995ae17a81d52589584f8f5ed6693dd632e6e152688cf01eba3acb45821216c896bee8f5849360e44518b852073d5a8bc5c9f60039697622

  • SSDEEP

    1536:/qbSe+Zk78NR3dN5nP0HB0UxMkzOt7HcvJGt5AdHIOWnToIf12Z9:/3e+a+3dN58hAWJGSCTBf12Z9

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      50e071c7c52b8f79bcc7862073b3fe0296b6e977db5b538d33e128c52d916650

    • Size

      93KB

    • MD5

      a676c871f859984d67661a29da7e591d

    • SHA1

      645a33ab03829ae16a5a8061d3eecd45fdc98e6f

    • SHA256

      50e071c7c52b8f79bcc7862073b3fe0296b6e977db5b538d33e128c52d916650

    • SHA512

      00c27c8eeb4a2dac995ae17a81d52589584f8f5ed6693dd632e6e152688cf01eba3acb45821216c896bee8f5849360e44518b852073d5a8bc5c9f60039697622

    • SSDEEP

      1536:/qbSe+Zk78NR3dN5nP0HB0UxMkzOt7HcvJGt5AdHIOWnToIf12Z9:/3e+a+3dN58hAWJGSCTBf12Z9

    Score
    7/10
    spywarestealer

    • Deletes itself

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks