Overview

overview

7

Static

static

3

5bc9f4f4ed...2b.exe

windows7-x64

7

5bc9f4f4ed...2b.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5bc9f4f4ed70856e6b955129d6398bc7ee8715af09d41ccfdffee924d530322b

  • Size

    290KB

  • Sample

    240503-16a5kaaf42

  • MD5

    5a3a6a26ef3ef19ff7ae7841a0058309

  • SHA1

    d8152a362aa42ee31dc8151dc6e7de042abb939c

  • SHA256

    5bc9f4f4ed70856e6b955129d6398bc7ee8715af09d41ccfdffee924d530322b

  • SHA512

    f6aae51796ab1ebba35f90bfd69fb31edc91c16427eac7af90a60ab85f00b50f66d34f1ec75f47af6ce2ac20fe6024866149c7b98d539f25e43579ffca425968

  • SSDEEP

    6144:xZ8azIUPlxvxL5Jon4yWPxfp3n4NMiJ8XVbE/xTmYKK/cjsS3H:xC0lPrd5uSxfp34Ke8XNKmYb/CsS3H

Score
7/10
persistencespywarestealer

Malware Config

Targets

    • Target

      5bc9f4f4ed70856e6b955129d6398bc7ee8715af09d41ccfdffee924d530322b

    • Size

      290KB

    • MD5

      5a3a6a26ef3ef19ff7ae7841a0058309

    • SHA1

      d8152a362aa42ee31dc8151dc6e7de042abb939c

    • SHA256

      5bc9f4f4ed70856e6b955129d6398bc7ee8715af09d41ccfdffee924d530322b

    • SHA512

      f6aae51796ab1ebba35f90bfd69fb31edc91c16427eac7af90a60ab85f00b50f66d34f1ec75f47af6ce2ac20fe6024866149c7b98d539f25e43579ffca425968

    • SSDEEP

      6144:xZ8azIUPlxvxL5Jon4yWPxfp3n4NMiJ8XVbE/xTmYKK/cjsS3H:xC0lPrd5uSxfp34Ke8XNKmYb/CsS3H

    Score
    7/10
    persistencespywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks