Overview

overview

7

Static

static

3

bdce9dfb06...d1.exe

windows7-x64

7

bdce9dfb06...d1.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bdce9dfb061e41db50533c7093d7138c17fdbecf363e0c39e3dbe5a9170087d1

  • Size

    74KB

  • Sample

    240523-wxvqdsbe97

  • MD5

    46d409810632a27f2d92454314d56f36

  • SHA1

    b93c3ae289a74ed53aea07dd97b6b1f5dbe39008

  • SHA256

    bdce9dfb061e41db50533c7093d7138c17fdbecf363e0c39e3dbe5a9170087d1

  • SHA512

    18469877a470e50b74ed00dc734cab0a7456de4c35c670d7d68345cee43217470f4438ebabc30d892a301afc5feeba0f3b2834907ac8d2c4fb3ff5c50ec53015

  • SSDEEP

    1536:/tmSe+Zk78NR3dN5nPAEToa9D4ZQKbgZi1dst7x9PxQ:/xe+a+3dN5QlZQKbgZi1St7xQ

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      bdce9dfb061e41db50533c7093d7138c17fdbecf363e0c39e3dbe5a9170087d1

    • Size

      74KB

    • MD5

      46d409810632a27f2d92454314d56f36

    • SHA1

      b93c3ae289a74ed53aea07dd97b6b1f5dbe39008

    • SHA256

      bdce9dfb061e41db50533c7093d7138c17fdbecf363e0c39e3dbe5a9170087d1

    • SHA512

      18469877a470e50b74ed00dc734cab0a7456de4c35c670d7d68345cee43217470f4438ebabc30d892a301afc5feeba0f3b2834907ac8d2c4fb3ff5c50ec53015

    • SSDEEP

      1536:/tmSe+Zk78NR3dN5nPAEToa9D4ZQKbgZi1dst7x9PxQ:/xe+a+3dN5QlZQKbgZi1St7xQ

    Score
    7/10
    spywarestealer

    • Deletes itself

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

Query Registry

1
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

1
T1082

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks