Overview

overview

7

Static

static

3

68dd309bea...64.exe

windows7-x64

7

68dd309bea...64.exe

windows10-2004-x64

4

Sharing

Copy URL
Twitter E-mail

General

  • Target

    68dd309beaffa311baf65d28938edf86bb8d052bd321dcf38c8a79bcf950da64

  • Size

    1.8MB

  • Sample

    240524-s2de5abb56

  • MD5

    75220149495d0c079369658cbd77b461

  • SHA1

    78305b8de9ec94c2ce7c42fea657fcb9f12e17a6

  • SHA256

    68dd309beaffa311baf65d28938edf86bb8d052bd321dcf38c8a79bcf950da64

  • SHA512

    4578277de04b16231e42d6dee583b69ac27df5827954f4ec54b216b079d21d367f253cf4b74426d9d27c81d33bc031124ca0ee7efc5474c77e0f1cadeab3a42d

  • SSDEEP

    49152:nKJ0WR7AFPyyiSruXKpk3WFDL9zxnS6Dmg27RnWGj:nKlBAFPydSS6W6X9lnRD527BWG

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      68dd309beaffa311baf65d28938edf86bb8d052bd321dcf38c8a79bcf950da64

    • Size

      1.8MB

    • MD5

      75220149495d0c079369658cbd77b461

    • SHA1

      78305b8de9ec94c2ce7c42fea657fcb9f12e17a6

    • SHA256

      68dd309beaffa311baf65d28938edf86bb8d052bd321dcf38c8a79bcf950da64

    • SHA512

      4578277de04b16231e42d6dee583b69ac27df5827954f4ec54b216b079d21d367f253cf4b74426d9d27c81d33bc031124ca0ee7efc5474c77e0f1cadeab3a42d

    • SSDEEP

      49152:nKJ0WR7AFPyyiSruXKpk3WFDL9zxnS6Dmg27RnWGj:nKlBAFPydSS6W6X9lnRD527BWG

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks