Overview

overview

7

Static

static

3

ImgeLoggerBuilder.exe

windows10-2004-x64

7

ImgeLoggerBuilder.exe

windows11-21h2-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ImgeLoggerBuilder.exe

  • Size

    13.9MB

  • Sample

    240428-zfrtysgh81

  • MD5

    a759c3adcd8baffd7d5433bd3c1860d9

  • SHA1

    2b93312d2fb60168faf49d62bd7f73fab3574e5a

  • SHA256

    d39de54d69c9c0ee00c8e6c82c5e66955f83e1338ab951027c04cde6b0f430b6

  • SHA512

    a4bd78510b946d214253cd27f0e55115aa3d027ca7e9af4b87daa4748234625f46d812aad0f5dcdcb1f214dc9318854c90a7633dfd3ffcbb38fe3e7705395bf5

  • SSDEEP

    393216:1au7L/yP8AxYDQdQuslSl9DoWOv+9fVjPwta:wCL5XEdQu9xorvStjb

Score
7/10
pyinstallerspywarestealer

Malware Config

Targets

    • Target

      ImgeLoggerBuilder.exe

    • Size

      13.9MB

    • MD5

      a759c3adcd8baffd7d5433bd3c1860d9

    • SHA1

      2b93312d2fb60168faf49d62bd7f73fab3574e5a

    • SHA256

      d39de54d69c9c0ee00c8e6c82c5e66955f83e1338ab951027c04cde6b0f430b6

    • SHA512

      a4bd78510b946d214253cd27f0e55115aa3d027ca7e9af4b87daa4748234625f46d812aad0f5dcdcb1f214dc9318854c90a7633dfd3ffcbb38fe3e7705395bf5

    • SSDEEP

      393216:1au7L/yP8AxYDQdQuslSl9DoWOv+9fVjPwta:wCL5XEdQu9xorvStjb

    Score
    7/10
    spywarestealer

    • Drops startup file

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

2
T1552

Credentials In Files

2
T1552.001

Discovery

Process Discovery

1
T1057

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Data from Local System

2
T1005

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks