General

  • Target

    2024-05-22_3fb9d1eb97f9651a1ce6f5b908d6e1e1_avoslocker

  • Size

    1.3MB

  • Sample

    240522-zbentsff62

  • MD5

    3fb9d1eb97f9651a1ce6f5b908d6e1e1

  • SHA1

    c3f7ddb6332d02157ab233ab12f79954ba937197

  • SHA256

    b3b5c48d7aa77cdba4f70d300aefc5d9ad54a5c4eb36456583867150cfd4c7f4

  • SHA512

    443d4e7e466fe1596f52dfa60d69a70be402d9610e44d8c20f576723fa12bee9dba72c7a88a6afa24d2aa4806ceeee4b6b921ee3753809f2eb2b024be9dd7c5e

  • SSDEEP

    24576:52zEYytjjqNSlhvpfQiIhKPtehfQ7r9qySkbgedfYDfyJJHwyyU7QJm8yPtYhn0e:5PtjtQiIhUyQd1SkFdfYjyJVJyNfyPtm

Score
7/10

Malware Config

Targets

    • Target

      2024-05-22_3fb9d1eb97f9651a1ce6f5b908d6e1e1_avoslocker

    • Size

      1.3MB

    • MD5

      3fb9d1eb97f9651a1ce6f5b908d6e1e1

    • SHA1

      c3f7ddb6332d02157ab233ab12f79954ba937197

    • SHA256

      b3b5c48d7aa77cdba4f70d300aefc5d9ad54a5c4eb36456583867150cfd4c7f4

    • SHA512

      443d4e7e466fe1596f52dfa60d69a70be402d9610e44d8c20f576723fa12bee9dba72c7a88a6afa24d2aa4806ceeee4b6b921ee3753809f2eb2b024be9dd7c5e

    • SSDEEP

      24576:52zEYytjjqNSlhvpfQiIhKPtehfQ7r9qySkbgedfYDfyJJHwyyU7QJm8yPtYhn0e:5PtjtQiIhUyQd1SkFdfYjyJVJyNfyPtm

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

System Information Discovery

1
T1082

Query Registry

1
T1012

Collection

Data from Local System

1
T1005

Tasks