Overview

overview

7

Static

static

3

2024-05-27...ia.exe

windows7-x64

5

2024-05-27...ia.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-05-27_32fe45a0ef7e6b83e3f73e5dd2fb271f_mafia

  • Size

    830KB

  • Sample

    240527-hhsqlabd6t

  • MD5

    32fe45a0ef7e6b83e3f73e5dd2fb271f

  • SHA1

    94a8be3252abe71a3f8fd2a97af3b3b2b1d22379

  • SHA256

    267a0eec03bca69067a56a007211a1dff62000cd73be03f51f5d9b69d44287fe

  • SHA512

    5b3adf9d68ac88addd22d277b13a911fc0e573363ab2c09e2bec647fd6d7ab3fc185f3c47cea3e5a68ea4fc3ebfc960d0c5ace1797376460347b2cb4c1639198

  • SSDEEP

    24576:62/r48zCNTNjx+mZCkt76f/24pN+XNqNG6hditW:R/08mJf9Ckt7c20+9qNxUW

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-05-27_32fe45a0ef7e6b83e3f73e5dd2fb271f_mafia

    • Size

      830KB

    • MD5

      32fe45a0ef7e6b83e3f73e5dd2fb271f

    • SHA1

      94a8be3252abe71a3f8fd2a97af3b3b2b1d22379

    • SHA256

      267a0eec03bca69067a56a007211a1dff62000cd73be03f51f5d9b69d44287fe

    • SHA512

      5b3adf9d68ac88addd22d277b13a911fc0e573363ab2c09e2bec647fd6d7ab3fc185f3c47cea3e5a68ea4fc3ebfc960d0c5ace1797376460347b2cb4c1639198

    • SSDEEP

      24576:62/r48zCNTNjx+mZCkt76f/24pN+XNqNG6hditW:R/08mJf9Ckt7c20+9qNxUW

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

System Information Discovery

3
T1082

Query Registry

2
T1012

Peripheral Device Discovery

1
T1120

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks