Overview

overview

7

Static

static

3

2024-05-05...ke.exe

windows7-x64

7

2024-05-05...ke.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-05-05_31ab013cc12a83395d3d4ad5a07807c7_avoslocker_cobalt-strike

  • Size

    816KB

  • Sample

    240505-kct3kscc4z

  • MD5

    31ab013cc12a83395d3d4ad5a07807c7

  • SHA1

    e3da13435e785ec2fbacb0c556f9ee29875bf8c5

  • SHA256

    8a00b049174d81fae8fd1b62999374aa161b5ef55d73a675bc9ae96b7195c7fa

  • SHA512

    67c253f0004c03096f7e805a9ea9c63809b709f8d2c84f7b1601fb20f1573bc7367830a634aeb63a6dddc5f23bdc25141843c83b594dad4b30c6e87bcf938bdc

  • SSDEEP

    24576:AnO5p0vVuXpTNgNeNELXK/pIDVxIc8sE:hD0vVGZNgwNELXC+LZW

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-05-05_31ab013cc12a83395d3d4ad5a07807c7_avoslocker_cobalt-strike

    • Size

      816KB

    • MD5

      31ab013cc12a83395d3d4ad5a07807c7

    • SHA1

      e3da13435e785ec2fbacb0c556f9ee29875bf8c5

    • SHA256

      8a00b049174d81fae8fd1b62999374aa161b5ef55d73a675bc9ae96b7195c7fa

    • SHA512

      67c253f0004c03096f7e805a9ea9c63809b709f8d2c84f7b1601fb20f1573bc7367830a634aeb63a6dddc5f23bdc25141843c83b594dad4b30c6e87bcf938bdc

    • SSDEEP

      24576:AnO5p0vVuXpTNgNeNELXK/pIDVxIc8sE:hD0vVGZNgwNELXC+LZW

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks