Overview

overview

7

Static

static

3

406bda7802...b9.exe

windows7-x64

7

406bda7802...b9.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    406bda7802acff6bacb9062d77e48a7dfb82aebe2d5b52c1dfdd38369893b4b9

  • Size

    1.8MB

  • Sample

    240524-zhhdasad9y

  • MD5

    f965c047281765619a0fcbba53fa3758

  • SHA1

    220cb1710cb40bb963b5c8dfa4161f3d830d56f2

  • SHA256

    406bda7802acff6bacb9062d77e48a7dfb82aebe2d5b52c1dfdd38369893b4b9

  • SHA512

    7f11a77a1f216e4b472e600632427fd665a0066454eddc5d971cae659e150637a3502f814d2370b8fcbd328353079ddde0fc1cb76f1daa4b4cf88ec1a23de3e6

  • SSDEEP

    49152:aKJ0WR7AFPyyiSruXKpk3WFDL9zxnSbf9Ckt7c20+9qNxUW:aKlBAFPydSS6W6X9lnifEkKK90

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      406bda7802acff6bacb9062d77e48a7dfb82aebe2d5b52c1dfdd38369893b4b9

    • Size

      1.8MB

    • MD5

      f965c047281765619a0fcbba53fa3758

    • SHA1

      220cb1710cb40bb963b5c8dfa4161f3d830d56f2

    • SHA256

      406bda7802acff6bacb9062d77e48a7dfb82aebe2d5b52c1dfdd38369893b4b9

    • SHA512

      7f11a77a1f216e4b472e600632427fd665a0066454eddc5d971cae659e150637a3502f814d2370b8fcbd328353079ddde0fc1cb76f1daa4b4cf88ec1a23de3e6

    • SSDEEP

      49152:aKJ0WR7AFPyyiSruXKpk3WFDL9zxnSbf9Ckt7c20+9qNxUW:aKlBAFPydSS6W6X9lnifEkKK90

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks