cb389aa95bddc36681c4bec373cea992293c7cb74bb82e12fc5093717668c004 | Triage

Submit
Reports

Overview

overview

Static

static

cb389aa95b...04.exe

windows7-x64

9

cb389aa95b...04.exe

windows10-2004-x64

9

Sharing

General

Target

cb389aa95bddc36681c4bec373cea992293c7cb74bb82e12fc5093717668c004
Size

387KB
Sample

240505-e1ed5seh2z
MD5

b40cc25ce8b65b2adf2918ac2f8b28be
SHA1

a450334c4a769a7928e0fbac2c3d1035bd9eb832
SHA256

cb389aa95bddc36681c4bec373cea992293c7cb74bb82e12fc5093717668c004
SHA512

76dbafacfdca63cbe1ae14468466671c198b27b2d349f92587d027c60e2627996986c048d6e8e7c5d47f5dee29650bf794af9400a966983546bc1e67c6dfad23
SSDEEP

6144:9rTfUHeeSKOS9ccFKk3Y9t9YZVS2Fzi/k:9n8yN0Mr8ZLFzi/k

Score

10^/10

persistence spyware stealer

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

cb389aa95bddc36681c4bec373cea992293c7cb74bb82e12fc5093717668c004.exe

Resource

win7-20231129-en

persistence spyware stealer

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

cb389aa95bddc36681c4bec373cea992293c7cb74bb82e12fc5093717668c004.exe

Resource

win10v2004-20240419-en

persistence spyware stealer

windows10-2004-x64

6 signatures

150 seconds

Malware Config

Targets

- Target
  
  cb389aa95bddc36681c4bec373cea992293c7cb74bb82e12fc5093717668c004
- Size
  
  387KB
- MD5
  
  b40cc25ce8b65b2adf2918ac2f8b28be
- SHA1
  
  a450334c4a769a7928e0fbac2c3d1035bd9eb832
- SHA256
  
  cb389aa95bddc36681c4bec373cea992293c7cb74bb82e12fc5093717668c004
- SHA512
  
  76dbafacfdca63cbe1ae14468466671c198b27b2d349f92587d027c60e2627996986c048d6e8e7c5d47f5dee29650bf794af9400a966983546bc1e67c6dfad23
- SSDEEP
  
  6144:9rTfUHeeSKOS9ccFKk3Y9t9YZVS2Fzi/k:9n8yN0Mr8ZLFzi/k
Score

9^/10

persistence spyware stealer
- UPX dump on OEP (original entry point)
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Unsecured Credentials

Credentials In Files

Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

persistencespywarestealer

behavioral2

persistencespywarestealer

© 2018-2025

Terms | Privacy