General

  • Target

    2024-05-24_f58ea20adb7e834d1b0a8dbc284c18ff_avoslocker

  • Size

    1.3MB

  • Sample

    240524-tq8mkaca64

  • MD5

    f58ea20adb7e834d1b0a8dbc284c18ff

  • SHA1

    efca8304d907ed9b23e3cb8b5e96251c9df0224f

  • SHA256

    a82fb5ccc833c44520ccf82c97bad1143440986fce4cfe4c1aa70f93589274cd

  • SHA512

    5419266b0ef663a1baa1ccbecff7b4e69dee6d2ea9511e56b02ca05ff315d9cd9892ac7c9062d48313798abe11201c854e3d7fd5bb49863f27d38a31ec718875

  • SSDEEP

    24576:v2zEYytjjqNSlhvpfQiIhKPtehfQ7r9qySkbged7TNjx+mZCkt76f/24pN+XNqNl:vPtjtQiIhUyQd1SkFdHf9Ckt7c20+9qT

Score
7/10

Malware Config

Targets

    • Target

      2024-05-24_f58ea20adb7e834d1b0a8dbc284c18ff_avoslocker

    • Size

      1.3MB

    • MD5

      f58ea20adb7e834d1b0a8dbc284c18ff

    • SHA1

      efca8304d907ed9b23e3cb8b5e96251c9df0224f

    • SHA256

      a82fb5ccc833c44520ccf82c97bad1143440986fce4cfe4c1aa70f93589274cd

    • SHA512

      5419266b0ef663a1baa1ccbecff7b4e69dee6d2ea9511e56b02ca05ff315d9cd9892ac7c9062d48313798abe11201c854e3d7fd5bb49863f27d38a31ec718875

    • SSDEEP

      24576:v2zEYytjjqNSlhvpfQiIhKPtehfQ7r9qySkbged7TNjx+mZCkt76f/24pN+XNqNl:vPtjtQiIhUyQd1SkFdHf9Ckt7c20+9qT

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

System Information Discovery

3
T1082

Query Registry

3
T1012

Peripheral Device Discovery

1
T1120

Collection

Data from Local System

1
T1005

Tasks