Overview

overview

7

Static

static

3

6a3088a99e...24.exe

windows7-x64

5

6a3088a99e...24.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6a3088a99e195bf45228ba23eed0555154c997eff3e69fe639be71e50c5d9624

  • Size

    1.4MB

  • Sample

    240428-z3t8lahg2y

  • MD5

    aaac9f5ad4ff635f0744de57713798f1

  • SHA1

    a869800bd542816f949e048bd805de42df1f199a

  • SHA256

    6a3088a99e195bf45228ba23eed0555154c997eff3e69fe639be71e50c5d9624

  • SHA512

    400333663dca4a40f18c37091f271d835001fb2684e7b4a76c299467dce671691104da7280473e5d540380bd21678f6c628798a7b902d219389b9fa9854001e2

  • SSDEEP

    24576:ToiB+90Djsf9nz4mloFQnpXUMPQDR6q79dA:TNzDYf5zaCpXxPuR6E9dA

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      6a3088a99e195bf45228ba23eed0555154c997eff3e69fe639be71e50c5d9624

    • Size

      1.4MB

    • MD5

      aaac9f5ad4ff635f0744de57713798f1

    • SHA1

      a869800bd542816f949e048bd805de42df1f199a

    • SHA256

      6a3088a99e195bf45228ba23eed0555154c997eff3e69fe639be71e50c5d9624

    • SHA512

      400333663dca4a40f18c37091f271d835001fb2684e7b4a76c299467dce671691104da7280473e5d540380bd21678f6c628798a7b902d219389b9fa9854001e2

    • SSDEEP

      24576:ToiB+90Djsf9nz4mloFQnpXUMPQDR6q79dA:TNzDYf5zaCpXxPuR6E9dA

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks