Overview

overview

8

Static

static

3

Shaderify 8.4.4.exe

windows11-21h2-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    Shaderify_8.4.4.rar
  • Size 53.8MB
  • Sample240603-krfthahe2w
  • SHA256 db11f713b75df9ffea554ca36aa4135d4e258198af482eb4e72f45b74141f14b
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10
executionpersistencespywarestealer

Malware Config

Targets

    • Target
      Shaderify 8.4.4.exe
    • Size 53.4MB
    • SHA256 dd4ce9e1a9daf52b9264ed81d72af9a0c7037d4f09af1883bce0faaeef91e914
    • MD5 SHA1 SHA512 SSDEEP
    Score
    8/10
    executionpersistencespywarestealer

    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

      execution

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • An obfuscated cmd.exe command-line is typically used to evade detection.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks