General

  • Target

    2024-05-24_cb0586308b876f56d471a3d8e3da64c1_avoslocker

  • Size

    1.3MB

  • Sample

    240524-ryl3eshf63

  • MD5

    cb0586308b876f56d471a3d8e3da64c1

  • SHA1

    c54dafddc09107932a619488c730315bfcec5d9f

  • SHA256

    bd2e1205ca87afdf0a52cf20879b6eb160f8ee66c75abc76dac06c55a451fcb1

  • SHA512

    8f81d6f0ce6198872eff88862b4f109bdaa81ff7519ec3d242e57ca2b204c06469fb2e5f2ffcf5e570871c9908eaf240bba5e9528579ff69ce18ef873c028ee6

  • SSDEEP

    24576:v2zEYytjjqNSlhvpfQiIhKPtehfQ7r9qySkbgedfSRQ5UOOU62FBnO+E222YJbNX:vPtjtQiIhUyQd1SkFdV5UbU62FAQ228T

Score
7/10

Malware Config

Targets

    • Target

      2024-05-24_cb0586308b876f56d471a3d8e3da64c1_avoslocker

    • Size

      1.3MB

    • MD5

      cb0586308b876f56d471a3d8e3da64c1

    • SHA1

      c54dafddc09107932a619488c730315bfcec5d9f

    • SHA256

      bd2e1205ca87afdf0a52cf20879b6eb160f8ee66c75abc76dac06c55a451fcb1

    • SHA512

      8f81d6f0ce6198872eff88862b4f109bdaa81ff7519ec3d242e57ca2b204c06469fb2e5f2ffcf5e570871c9908eaf240bba5e9528579ff69ce18ef873c028ee6

    • SSDEEP

      24576:v2zEYytjjqNSlhvpfQiIhKPtehfQ7r9qySkbgedfSRQ5UOOU62FBnO+E222YJbNX:vPtjtQiIhUyQd1SkFdV5UbU62FAQ228T

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

System Information Discovery

3
T1082

Query Registry

3
T1012

Peripheral Device Discovery

1
T1120

Collection

Data from Local System

1
T1005

Tasks