Overview

overview

8

Static

static

7

adfa8a2de2...47.exe

windows7-x64

8

adfa8a2de2...47.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    adfa8a2de2cfbc02ce177e97ecd0b2383f19cd19088b2e3b8f5d9626e34c0947

  • Size

    1.3MB

  • Sample

    240429-nfnxhshc83

  • MD5

    aca1d7278a78d2e87a027c4bf96575d9

  • SHA1

    a26d922566bcc10dfb8b2e667171a00d992baf96

  • SHA256

    adfa8a2de2cfbc02ce177e97ecd0b2383f19cd19088b2e3b8f5d9626e34c0947

  • SHA512

    f4fe11fd1838679bbfcd3204ee6f2adf6bb40f366156a5f7c3aeb20cb877a7f91c2344037317183988c86e04f5e3c2bcf656623c848e50b9f9c27971ac990555

  • SSDEEP

    24576:Qak/7Nk4RZyrKZu0zoFmDcpii9iGn+66rLfJIgtEqPILWz8oDqE:Qak/4+Zu+k0WdEacJRIo+E

Score
8/10
aspackv2discoveryspywarestealer

Malware Config

Targets

    • Target

      adfa8a2de2cfbc02ce177e97ecd0b2383f19cd19088b2e3b8f5d9626e34c0947

    • Size

      1.3MB

    • MD5

      aca1d7278a78d2e87a027c4bf96575d9

    • SHA1

      a26d922566bcc10dfb8b2e667171a00d992baf96

    • SHA256

      adfa8a2de2cfbc02ce177e97ecd0b2383f19cd19088b2e3b8f5d9626e34c0947

    • SHA512

      f4fe11fd1838679bbfcd3204ee6f2adf6bb40f366156a5f7c3aeb20cb877a7f91c2344037317183988c86e04f5e3c2bcf656623c848e50b9f9c27971ac990555

    • SSDEEP

      24576:Qak/7Nk4RZyrKZu0zoFmDcpii9iGn+66rLfJIgtEqPILWz8oDqE:Qak/4+Zu+k0WdEacJRIo+E

    Score
    8/10
    discoveryspywarestealer

    • Drops file in Drivers directory

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks