Overview

overview

7

Static

static

3

b9510d6d27...82.exe

windows7-x64

7

b9510d6d27...82.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b9510d6d27656986d151b7f4e3e1de3c4749d0527766bb40c9dc28ec1b5f1382

  • Size

    3.1MB

  • Sample

    240620-csd3astckg

  • MD5

    8de8acc6200012a1460fb562cf972223

  • SHA1

    c07ced7fe4c0e3471fac9e2ab4cff7b8d72ac05c

  • SHA256

    b9510d6d27656986d151b7f4e3e1de3c4749d0527766bb40c9dc28ec1b5f1382

  • SHA512

    d48078ca20d303bf84c0115c9a63872a7aae22a40b8fcf5ae88da54cd7f2889f281635cac757e386b00b8b2c0de617d4520670d336e1c681c0e23b93d4eb89f5

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LB+B/bSqz8b6LNXJqI20:sxX7QnxrloE5dpUp5bVz8eLFcz

Score
7/10
persistencespywarestealer

Malware Config

Targets

    • Target

      b9510d6d27656986d151b7f4e3e1de3c4749d0527766bb40c9dc28ec1b5f1382

    • Size

      3.1MB

    • MD5

      8de8acc6200012a1460fb562cf972223

    • SHA1

      c07ced7fe4c0e3471fac9e2ab4cff7b8d72ac05c

    • SHA256

      b9510d6d27656986d151b7f4e3e1de3c4749d0527766bb40c9dc28ec1b5f1382

    • SHA512

      d48078ca20d303bf84c0115c9a63872a7aae22a40b8fcf5ae88da54cd7f2889f281635cac757e386b00b8b2c0de617d4520670d336e1c681c0e23b93d4eb89f5

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LB+B/bSqz8b6LNXJqI20:sxX7QnxrloE5dpUp5bVz8eLFcz

    Score
    7/10
    persistencespywarestealer

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks