Overview

overview

7

Static

static

3

d12d4da3ba...ad.exe

windows7-x64

7

d12d4da3ba...ad.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    d12d4da3bab8a93ef31a5b25384c5e700299bada572d822f561e35138d15ae91_payload.exe

  • Size

    416KB

  • Sample

    240519-2nyzcaeh46

  • MD5

    49065631d44c3c19fe1b53529d9d84ba

  • SHA1

    32206630a04f18f29bccb701a842940a4d258e93

  • SHA256

    4849605aaec6789a7f9930414e504086651c0b973bc9d2c430ee409c29b5a90e

  • SHA512

    f0021048db723f08e959706fd62d00098f8f48452d5dac33afcec283b88a41989cab36d0e9d7b09c5f819e1f8b555ada7b768438e733eb66c8e9c06c1170a939

  • SSDEEP

    6144:ELKmtvXaAaEkGHlXB2QrZ9Q1hh0P/a+F6JbzyTbCxZLHJmqeDereDUh:KKmtvqA5bB2Q9Q17uCbnfDexU

Score
7/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      d12d4da3bab8a93ef31a5b25384c5e700299bada572d822f561e35138d15ae91_payload.exe

    • Size

      416KB

    • MD5

      49065631d44c3c19fe1b53529d9d84ba

    • SHA1

      32206630a04f18f29bccb701a842940a4d258e93

    • SHA256

      4849605aaec6789a7f9930414e504086651c0b973bc9d2c430ee409c29b5a90e

    • SHA512

      f0021048db723f08e959706fd62d00098f8f48452d5dac33afcec283b88a41989cab36d0e9d7b09c5f819e1f8b555ada7b768438e733eb66c8e9c06c1170a939

    • SSDEEP

      6144:ELKmtvXaAaEkGHlXB2QrZ9Q1hh0P/a+F6JbzyTbCxZLHJmqeDereDUh:KKmtvqA5bB2Q9Q17uCbnfDexU

    Score
    7/10
    discoveryspywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks