Overview

overview

7

Static

static

3

2024-05-23...il.exe

windows7-x64

7

2024-05-23...il.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-23_6649085270982567fc3bcfbd716051ed_avoslocker_revil

  • Size

    3.5MB

  • Sample

    240523-mmsnlsdc82

  • MD5

    6649085270982567fc3bcfbd716051ed

  • SHA1

    cc66249b2fe3213bee61ff8606c32ac1a1416c4e

  • SHA256

    571c1e0ee0f6d5536b4d2af507bade99f5f5009299fc904ba80368e3cedd1ff3

  • SHA512

    53efc34b6246395cfbeb0e8439fb4458e1996f1b0e7003b69dc8576cf137eb07a900074f27e12b0e530bfccf061c7fabc906785fcd7a6c88b24bbbf6ace863fd

  • SSDEEP

    49152:duvxvUDT8VVWFGQJnolA4l6fX98qzaFtPoIVVLFTLmvdRsA5hLDmg27RnWGj:duvxvUMuGCozl6f92OIVHm7D527BWG

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-05-23_6649085270982567fc3bcfbd716051ed_avoslocker_revil

    • Size

      3.5MB

    • MD5

      6649085270982567fc3bcfbd716051ed

    • SHA1

      cc66249b2fe3213bee61ff8606c32ac1a1416c4e

    • SHA256

      571c1e0ee0f6d5536b4d2af507bade99f5f5009299fc904ba80368e3cedd1ff3

    • SHA512

      53efc34b6246395cfbeb0e8439fb4458e1996f1b0e7003b69dc8576cf137eb07a900074f27e12b0e530bfccf061c7fabc906785fcd7a6c88b24bbbf6ace863fd

    • SSDEEP

      49152:duvxvUDT8VVWFGQJnolA4l6fX98qzaFtPoIVVLFTLmvdRsA5hLDmg27RnWGj:duvxvUMuGCozl6f92OIVHm7D527BWG

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks