Overview

overview

9

Static

static

3

625d9a61dc...f4.exe

windows7-x64

9

625d9a61dc...f4.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    625d9a61dcf86fec9da7970bdea87e62fc5edbe119ad79a0c0fe1da995f0fff4

  • Size

    1.3MB

  • Sample

    240522-2dvh6sbd64

  • MD5

    dd9ff4346d600e405c42750746434d49

  • SHA1

    5f862f201630a8515dfea0567c13fcdc8d184d1a

  • SHA256

    625d9a61dcf86fec9da7970bdea87e62fc5edbe119ad79a0c0fe1da995f0fff4

  • SHA512

    11b4e0fda576dc8cf4eecbf5af381377004a020789a2561187ba7f99be9dccb936006904841811cf73db6fe1ac25faea1d3f60ae0a5f21767df1d27db89e5c87

  • SSDEEP

    12288:+Hgj+Xq1gYgR+8DAoczI2ZfnwlQTePINayz+ByIne7xmmZjIUTSl+0/1:+HxMdIuwe3zfIe7xmvH/

Score
9/10
spywarestealer

Malware Config

Targets

    • Target

      625d9a61dcf86fec9da7970bdea87e62fc5edbe119ad79a0c0fe1da995f0fff4

    • Size

      1.3MB

    • MD5

      dd9ff4346d600e405c42750746434d49

    • SHA1

      5f862f201630a8515dfea0567c13fcdc8d184d1a

    • SHA256

      625d9a61dcf86fec9da7970bdea87e62fc5edbe119ad79a0c0fe1da995f0fff4

    • SHA512

      11b4e0fda576dc8cf4eecbf5af381377004a020789a2561187ba7f99be9dccb936006904841811cf73db6fe1ac25faea1d3f60ae0a5f21767df1d27db89e5c87

    • SSDEEP

      12288:+Hgj+Xq1gYgR+8DAoczI2ZfnwlQTePINayz+ByIne7xmmZjIUTSl+0/1:+HxMdIuwe3zfIe7xmvH/

    Score
    9/10
    spywarestealer

    • Detects images embedding archives. Observed in TheRat RAT.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks