Overview

overview

10

Static

static

10

4193f57c71...93.exe

windows7-x64

9

4193f57c71...93.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4193f57c71a4c5a46fb50bbadee6e9d1786bba4820f17da52bbd0b741e311693

  • Size

    387KB

  • Sample

    240624-znxeeascpe

  • MD5

    6a83e0018512174846a87c577db58ba2

  • SHA1

    91e67bb940eb4736aca57e93f9251cc21816e7fd

  • SHA256

    4193f57c71a4c5a46fb50bbadee6e9d1786bba4820f17da52bbd0b741e311693

  • SHA512

    52032a277a6c5f204efce6b122c453c08bcc9bb47b1f486d27a328e197163f24abef622744879dadc69ea4d771e4b1f8e925c6556014d9177f0e5dad12dd9a85

  • SSDEEP

    6144:/rTfUHeeSKOS9ccFKk3Y9t9YZjuiYz1MpA5nL:/n8yN0Mr8ZjtI1z5nL

Score
10/10
persistencespywarestealer

Malware Config

Targets

    • Target

      4193f57c71a4c5a46fb50bbadee6e9d1786bba4820f17da52bbd0b741e311693

    • Size

      387KB

    • MD5

      6a83e0018512174846a87c577db58ba2

    • SHA1

      91e67bb940eb4736aca57e93f9251cc21816e7fd

    • SHA256

      4193f57c71a4c5a46fb50bbadee6e9d1786bba4820f17da52bbd0b741e311693

    • SHA512

      52032a277a6c5f204efce6b122c453c08bcc9bb47b1f486d27a328e197163f24abef622744879dadc69ea4d771e4b1f8e925c6556014d9177f0e5dad12dd9a85

    • SSDEEP

      6144:/rTfUHeeSKOS9ccFKk3Y9t9YZjuiYz1MpA5nL:/n8yN0Mr8ZjtI1z5nL

    Score
    9/10
    persistencespywarestealer

    • UPX dump on OEP (original entry point)

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks