Overview

overview

7

Static

static

3

0b3406ff31...87.dll

windows7-x64

1

0b3406ff31...87.dll

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0b3406ff314d9ed77f252005541df6df3b0e779f2ca0b2295c6d9ff5da65e087

  • Size

    2.6MB

  • Sample

    240523-lany8abg61

  • MD5

    77fbe5dc0c1e8bb93003b0cb3a7a7544

  • SHA1

    b97945d582cb8e69420cafdf13434dcbce14d079

  • SHA256

    0b3406ff314d9ed77f252005541df6df3b0e779f2ca0b2295c6d9ff5da65e087

  • SHA512

    a5f93ca0f356df8ba6febc83ab4f714e98c80d346748843c56910c4f9e46a08f97089b0df2712704b36e3958d3583e4d7107fadcd715279c8ac1c412e29233a4

  • SSDEEP

    49152:fUqKbFoZh5ssm4Gn3usX2qQYkVI9KZ1EpXhEQTZ1lsc07PlLxBmZFTbdTmHs:8HbOssvGhX2zLlZg2KNm

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      0b3406ff314d9ed77f252005541df6df3b0e779f2ca0b2295c6d9ff5da65e087

    • Size

      2.6MB

    • MD5

      77fbe5dc0c1e8bb93003b0cb3a7a7544

    • SHA1

      b97945d582cb8e69420cafdf13434dcbce14d079

    • SHA256

      0b3406ff314d9ed77f252005541df6df3b0e779f2ca0b2295c6d9ff5da65e087

    • SHA512

      a5f93ca0f356df8ba6febc83ab4f714e98c80d346748843c56910c4f9e46a08f97089b0df2712704b36e3958d3583e4d7107fadcd715279c8ac1c412e29233a4

    • SSDEEP

      49152:fUqKbFoZh5ssm4Gn3usX2qQYkVI9KZ1EpXhEQTZ1lsc07PlLxBmZFTbdTmHs:8HbOssvGhX2zLlZg2KNm

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks