Overview

overview

7

Static

static

3

4e2428c877...89.exe

windows7-x64

7

4e2428c877...89.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4e2428c877038e8d027affa40bdad55460d3a029e8a9c1f517505a61f7c75b89

  • Size

    1.8MB

  • Sample

    240527-xlafraea9w

  • MD5

    ff5f92903f622c624d449c39f59800f2

  • SHA1

    9da6815eeee4bbd3db7e6ada9d2ea712bd54e062

  • SHA256

    4e2428c877038e8d027affa40bdad55460d3a029e8a9c1f517505a61f7c75b89

  • SHA512

    d3fa972cc7a49196986a971f90dbf17a44c2f4ae1b788cabbd64af1231579d563b5f285f512e3871a7f1cc078466a874b696f25d4769e6caae0dac9b68c36c0b

  • SSDEEP

    49152:4KJ0WR7AFPyyiSruXKpk3WFDL9zxnSkkQ/qoLEw:4KlBAFPydSS6W6X9lnZqo4w

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      4e2428c877038e8d027affa40bdad55460d3a029e8a9c1f517505a61f7c75b89

    • Size

      1.8MB

    • MD5

      ff5f92903f622c624d449c39f59800f2

    • SHA1

      9da6815eeee4bbd3db7e6ada9d2ea712bd54e062

    • SHA256

      4e2428c877038e8d027affa40bdad55460d3a029e8a9c1f517505a61f7c75b89

    • SHA512

      d3fa972cc7a49196986a971f90dbf17a44c2f4ae1b788cabbd64af1231579d563b5f285f512e3871a7f1cc078466a874b696f25d4769e6caae0dac9b68c36c0b

    • SSDEEP

      49152:4KJ0WR7AFPyyiSruXKpk3WFDL9zxnSkkQ/qoLEw:4KlBAFPydSS6W6X9lnZqo4w

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks