Overview

overview

10

Static

static

10

51d7105c09...5c.exe

windows7-x64

9

51d7105c09...5c.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    51d7105c09828e4d4b3651a921f68c6b970b709c974c7cb62a33e51e755f015c

  • Size

    991KB

  • Sample

    240616-z5q9qasdpr

  • MD5

    4d5d495e7752c5d62ce5afc28af7ba2c

  • SHA1

    04d6b209753eb288b2b8acc319bb2a4896362ad5

  • SHA256

    51d7105c09828e4d4b3651a921f68c6b970b709c974c7cb62a33e51e755f015c

  • SHA512

    5b665598204a45200883d7f89f663eaaf9f49163614c75641254c1f692c0d2d41dd3b1258125242eb61ec2fec71b3c7ee2cb18581898230719c2c8b094234e49

  • SSDEEP

    24576:oW7TfPNSgcBQpWAeO9LBPIpkT2zTsO98GXSxl/p/30:V7TfPNSgaRA9FPIw2L8xDhM

Score
10/10
persistencespywarestealer

Malware Config

Targets

    • Target

      51d7105c09828e4d4b3651a921f68c6b970b709c974c7cb62a33e51e755f015c

    • Size

      991KB

    • MD5

      4d5d495e7752c5d62ce5afc28af7ba2c

    • SHA1

      04d6b209753eb288b2b8acc319bb2a4896362ad5

    • SHA256

      51d7105c09828e4d4b3651a921f68c6b970b709c974c7cb62a33e51e755f015c

    • SHA512

      5b665598204a45200883d7f89f663eaaf9f49163614c75641254c1f692c0d2d41dd3b1258125242eb61ec2fec71b3c7ee2cb18581898230719c2c8b094234e49

    • SSDEEP

      24576:oW7TfPNSgcBQpWAeO9LBPIpkT2zTsO98GXSxl/p/30:V7TfPNSgaRA9FPIw2L8xDhM

    Score
    9/10
    persistencespywarestealer

    • Detects executables containing possible sandbox analysis VM usernames

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks