Overview

overview

7

Static

static

3

c0c9df581e...3f.exe

windows7-x64

7

c0c9df581e...3f.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    c0c9df581e3b2b746d098ff9b8b01c4797f113c7d165cf7040b2240d8bbf7b3f

  • Size

    625KB

  • Sample

    240503-dh9a5afe97

  • MD5

    2c7f2e36751c6cec99ae1f261ed16972

  • SHA1

    50e3164c3a0adb6c30f3c0b4b7b472c6d04eebc5

  • SHA256

    c0c9df581e3b2b746d098ff9b8b01c4797f113c7d165cf7040b2240d8bbf7b3f

  • SHA512

    0de08309a2f0366ac7e4ce0afdc4a57d0d102409ba5cab6f9a336ac2f93cf5ae79818264823655a41c7285a0f40edce5ffcf85ddec08d994cde2a238ad183416

  • SSDEEP

    12288:22pp/SInr8vv2BDeT+bVYHTb3FRk/rMNxaXqqlPbJKTGv5DYFXOBnXREHa:Tn/i328ab4F+rM/aXq6bJfBUam6

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      c0c9df581e3b2b746d098ff9b8b01c4797f113c7d165cf7040b2240d8bbf7b3f

    • Size

      625KB

    • MD5

      2c7f2e36751c6cec99ae1f261ed16972

    • SHA1

      50e3164c3a0adb6c30f3c0b4b7b472c6d04eebc5

    • SHA256

      c0c9df581e3b2b746d098ff9b8b01c4797f113c7d165cf7040b2240d8bbf7b3f

    • SHA512

      0de08309a2f0366ac7e4ce0afdc4a57d0d102409ba5cab6f9a336ac2f93cf5ae79818264823655a41c7285a0f40edce5ffcf85ddec08d994cde2a238ad183416

    • SSDEEP

      12288:22pp/SInr8vv2BDeT+bVYHTb3FRk/rMNxaXqqlPbJKTGv5DYFXOBnXREHa:Tn/i328ab4F+rM/aXq6bJfBUam6

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks