Overview

overview

8

Static

static

3

0935794a7c...43.exe

windows7-x64

0935794a7c...43.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    0935794a7ca8497d52442f5dd3c2246a002987edb433dfe76905aa4614ef6843

  • Size

    48KB

  • Sample

    240609-xdytdadf6v

  • MD5

    8c7992cdb94ff780327b6ff0ace70dc4

  • SHA1

    aeff88406a2f216944aa5d5490ace03cb0f85a9e

  • SHA256

    0935794a7ca8497d52442f5dd3c2246a002987edb433dfe76905aa4614ef6843

  • SHA512

    1f6f465e9d4fdf071a21e65cd6480cc2d9c78923a8fedbee4a7b01354d82669b289914e20b5548cc3fbd7bc3094e87b89400d1ae5aa0151bd89300d3ef2f6410

  • SSDEEP

    768:J8MUElOIEvzMXqtwp/lDTJg/MFksCRsd2u9C9MFWoVaZelCWQ3655Kv1X/qY1MSd:JyaYzMXqtGN/CstC9qVFCHqaNrFd

Score
8/10
spywarestealer

Malware Config

Targets

    • Target

      0935794a7ca8497d52442f5dd3c2246a002987edb433dfe76905aa4614ef6843

    • Size

      48KB

    • MD5

      8c7992cdb94ff780327b6ff0ace70dc4

    • SHA1

      aeff88406a2f216944aa5d5490ace03cb0f85a9e

    • SHA256

      0935794a7ca8497d52442f5dd3c2246a002987edb433dfe76905aa4614ef6843

    • SHA512

      1f6f465e9d4fdf071a21e65cd6480cc2d9c78923a8fedbee4a7b01354d82669b289914e20b5548cc3fbd7bc3094e87b89400d1ae5aa0151bd89300d3ef2f6410

    • SSDEEP

      768:J8MUElOIEvzMXqtwp/lDTJg/MFksCRsd2u9C9MFWoVaZelCWQ3655Kv1X/qY1MSd:JyaYzMXqtGN/CstC9qVFCHqaNrFd

    Score
    8/10
    spywarestealer

    • Drops file in Drivers directory

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks