Overview

overview

10

Static

static

10

sysEXEC.exe

windows10-1703-x64

7

sysEXEC.exe

windows10-2004-x64

7

Creal.pyc

windows10-1703-x64

3

Creal.pyc

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    sysEXEC.exe

  • Size

    14.5MB

  • Sample

    240618-kqgz6swcmh

  • MD5

    02d12d780b93209fad2a6dc29716b278

  • SHA1

    d425f1c11190044e07be7c87845a0a89203fec9e

  • SHA256

    1302f2c7054ea7194ce07428af0c2fa00c46e2d27fb96e7734f09cdab139b1a5

  • SHA512

    6f9c5a62742049f0218ddcf59ef880f231809010cbad3954197616036828839893b2af38137c419732f2a3dda8f41b32a8ad4845b48c1bb506f52ad0448241b1

  • SSDEEP

    393216:LEkZQ0dQuslSq99oWOv+9fgWtRT7k3he:LhQ0dQuSDorvSYWtl74h

Score
10/10
crealstealerpyinstallerspywarestealer

Malware Config

Targets

    • Target

      sysEXEC.exe

    • Size

      14.5MB

    • MD5

      02d12d780b93209fad2a6dc29716b278

    • SHA1

      d425f1c11190044e07be7c87845a0a89203fec9e

    • SHA256

      1302f2c7054ea7194ce07428af0c2fa00c46e2d27fb96e7734f09cdab139b1a5

    • SHA512

      6f9c5a62742049f0218ddcf59ef880f231809010cbad3954197616036828839893b2af38137c419732f2a3dda8f41b32a8ad4845b48c1bb506f52ad0448241b1

    • SSDEEP

      393216:LEkZQ0dQuslSq99oWOv+9fgWtRT7k3he:LhQ0dQuSDorvSYWtl74h

    Score
    7/10
    spywarestealer

    • Drops startup file

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

    • Target

      Creal.pyc

    • Size

      82KB

    • MD5

      85b513e06d60766bf9d2e324fcce2108

    • SHA1

      ba1af8ec4aac32f5333f39a73d16cc8da7307399

    • SHA256

      6bdebac7fd9cd105c7d52cdc99e88e1dd486882509fccfcd2aed92a51ab17379

    • SHA512

      01df4739559d10b2b840103b5d3a003ce4afbb42fe5fed18c43a1d894b8719cfb92813d370f21c1fbfca09c02ff5f6715479b23b8dfc3a43407576b241784b25

    • SSDEEP

      1536:MupDrbe3uzTZMB7aK1ieL7iVX9hcuhFwNfb2GJjOZRJ:bpDve3uz0BkSGN9iOzOjsP

    Score
    3/10
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks