Overview

overview

7

Static

static

3

e0af009022...6c.exe

windows7-x64

7

e0af009022...6c.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e0af0090225dfacaae6d0dc0f8e589066ee6d9cf460feb236d061b808d58376c

  • Size

    4.1MB

  • Sample

    240523-g5bj6agb96

  • MD5

    19e39e02d05aaf110ea196df080d0013

  • SHA1

    01e1c9f44b55182b066c009197131cb379c03300

  • SHA256

    e0af0090225dfacaae6d0dc0f8e589066ee6d9cf460feb236d061b808d58376c

  • SHA512

    eaa966b4108f06014deca5f7e67ddc233fa0a900b229992ebdc359f1c6dbf38a84ba146b62a530068ae27b1a885149a4b21eeaf95ce0cb7d7b8361fe9efc9128

  • SSDEEP

    49152:Z7uTEk9yZGTrRJlfOI3vO1hVWV8O2f5wK4mjPuXVQb9ZQjFur5+YJsFQqSqACStU:0lONWWO2f9uiJ3/aHC31

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      e0af0090225dfacaae6d0dc0f8e589066ee6d9cf460feb236d061b808d58376c

    • Size

      4.1MB

    • MD5

      19e39e02d05aaf110ea196df080d0013

    • SHA1

      01e1c9f44b55182b066c009197131cb379c03300

    • SHA256

      e0af0090225dfacaae6d0dc0f8e589066ee6d9cf460feb236d061b808d58376c

    • SHA512

      eaa966b4108f06014deca5f7e67ddc233fa0a900b229992ebdc359f1c6dbf38a84ba146b62a530068ae27b1a885149a4b21eeaf95ce0cb7d7b8361fe9efc9128

    • SSDEEP

      49152:Z7uTEk9yZGTrRJlfOI3vO1hVWV8O2f5wK4mjPuXVQb9ZQjFur5+YJsFQqSqACStU:0lONWWO2f9uiJ3/aHC31

    Score
    7/10
    spywarestealer

    • Deletes itself

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

3
T1082

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks