Overview

overview

7

Static

static

3

050e535045...45.exe

windows7-x64

7

050e535045...45.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    050e5350452861406c919787e754d8fc2eb18543da3d487bc67e2aa49a65eb45

  • Size

    830KB

  • Sample

    240706-wvhm2s1bqb

  • MD5

    303fc4a84c3c9d488c9497ecf25df26c

  • SHA1

    8ba2c7f56d5083e55a9ded7ef9d773d8fd0bedd3

  • SHA256

    050e5350452861406c919787e754d8fc2eb18543da3d487bc67e2aa49a65eb45

  • SHA512

    8113e5df7ee9758c821c3f3d325be796062e820304d09442bb54a7f491f1c7a3ccaf09d06adc85d92b49047a6fffb3c4c4b64bd03f1db8eb77a8f6f4ee7d30f2

  • SSDEEP

    24576:JUhzv/TaTPRmlh8t0D+7y8G2G9yL0cMoThTR9PyuLzpQo:JUVnTAm+brLC2hTR9quLB

Score
7/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      050e5350452861406c919787e754d8fc2eb18543da3d487bc67e2aa49a65eb45

    • Size

      830KB

    • MD5

      303fc4a84c3c9d488c9497ecf25df26c

    • SHA1

      8ba2c7f56d5083e55a9ded7ef9d773d8fd0bedd3

    • SHA256

      050e5350452861406c919787e754d8fc2eb18543da3d487bc67e2aa49a65eb45

    • SHA512

      8113e5df7ee9758c821c3f3d325be796062e820304d09442bb54a7f491f1c7a3ccaf09d06adc85d92b49047a6fffb3c4c4b64bd03f1db8eb77a8f6f4ee7d30f2

    • SSDEEP

      24576:JUhzv/TaTPRmlh8t0D+7y8G2G9yL0cMoThTR9PyuLzpQo:JUVnTAm+brLC2hTR9quLB

    Score
    7/10
    spywarestealerdiscovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies file permissions

      discovery

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks