Overview

overview

7

Static

static

3

e211e2beb4...43.exe

windows7-x64

7

e211e2beb4...43.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e211e2beb483402a7f769691c7981e720da14290b76fe24919df7575b3503b43

  • Size

    1.2MB

  • Sample

    240524-ze3j3aac8t

  • MD5

    1e2ea6a68edb54fc53d41c21828f9147

  • SHA1

    208749feb57437c039da6786a9f4b8c182ca7367

  • SHA256

    e211e2beb483402a7f769691c7981e720da14290b76fe24919df7575b3503b43

  • SHA512

    6548ae3185a40ac2cd7ed7cbff86573d44610c7d8561e1e897f3d88b2b8c21e9435e963196964acb6ff3da059e2628eeeee22d8618555e36d28e6c84086f1ea3

  • SSDEEP

    24576:9TN9Yj3Htgtozpyj4mIexasqjnhMgeiCl7G0nehbGZpbD:9gHyELexuDmg27RnWGj

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      e211e2beb483402a7f769691c7981e720da14290b76fe24919df7575b3503b43

    • Size

      1.2MB

    • MD5

      1e2ea6a68edb54fc53d41c21828f9147

    • SHA1

      208749feb57437c039da6786a9f4b8c182ca7367

    • SHA256

      e211e2beb483402a7f769691c7981e720da14290b76fe24919df7575b3503b43

    • SHA512

      6548ae3185a40ac2cd7ed7cbff86573d44610c7d8561e1e897f3d88b2b8c21e9435e963196964acb6ff3da059e2628eeeee22d8618555e36d28e6c84086f1ea3

    • SSDEEP

      24576:9TN9Yj3Htgtozpyj4mIexasqjnhMgeiCl7G0nehbGZpbD:9gHyELexuDmg27RnWGj

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks