Overview

overview

7

Static

static

3

file.exe

windows7-x64

7

file.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    file.exe

  • Size

    539KB

  • Sample

    240528-yw56vaad3v

  • MD5

    9d4d3e9107fab87e6b86d8ad6cfc8244

  • SHA1

    841e2183ebee75b32319ce7cf81f82f8d2ca3cea

  • SHA256

    a6516b7a67fd64731c893ad8ee12c2878673841cbb756a8e597812da52b08027

  • SHA512

    e9da618fa873db7a2b5ab4813db6ef6bd0c2356c4682c9415b9b62dc192e1fc8e5fee423c698cc3695e665e2699664c68c8041746ad0e51753309a9bc21eecf3

  • SSDEEP

    12288:v5d20CeBNGZiM1KVO0VeUOmC5sf52gpc/6ZpKS9fJsM9gQ07DG2iHh9v7zZwZE+t:xd20rwZiM1d0V78m4WL

Score
7/10
spyware

Malware Config

Targets

    • Target

      file.exe

    • Size

      539KB

    • MD5

      9d4d3e9107fab87e6b86d8ad6cfc8244

    • SHA1

      841e2183ebee75b32319ce7cf81f82f8d2ca3cea

    • SHA256

      a6516b7a67fd64731c893ad8ee12c2878673841cbb756a8e597812da52b08027

    • SHA512

      e9da618fa873db7a2b5ab4813db6ef6bd0c2356c4682c9415b9b62dc192e1fc8e5fee423c698cc3695e665e2699664c68c8041746ad0e51753309a9bc21eecf3

    • SSDEEP

      12288:v5d20CeBNGZiM1KVO0VeUOmC5sf52gpc/6ZpKS9fJsM9gQ07DG2iHh9v7zZwZE+t:xd20rwZiM1d0V78m4WL

    Score
    7/10
    spyware

    • Loads dropped DLL

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks