Overview

overview

7

Static

static

3

b14ff5ac5c...04.exe

windows7-x64

7

b14ff5ac5c...04.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b14ff5ac5c6ec6833e4ae8825b5be55016ee184bae70a7f3f3c5b9fb85b9db04

  • Size

    1.5MB

  • Sample

    240708-dhnz7azakk

  • MD5

    3989aeefedc897076afd610f2a789c1d

  • SHA1

    afb4c2d0e8c3629c591d4e26d370cbe0c4bb4950

  • SHA256

    b14ff5ac5c6ec6833e4ae8825b5be55016ee184bae70a7f3f3c5b9fb85b9db04

  • SHA512

    c6318442829362f3f111399eb4f906ed2f9a3eb18d3d31c348ced1590644cf5893a37c4bc0c1aaecbf312ae90a89932052ae3ba594667e0c18e34c4264836033

  • SSDEEP

    24576:RuLX7bHsMQ4/O6yMLprOInyT/Swl8Mi9:RuLXvYMLprznyDSga9

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      b14ff5ac5c6ec6833e4ae8825b5be55016ee184bae70a7f3f3c5b9fb85b9db04

    • Size

      1.5MB

    • MD5

      3989aeefedc897076afd610f2a789c1d

    • SHA1

      afb4c2d0e8c3629c591d4e26d370cbe0c4bb4950

    • SHA256

      b14ff5ac5c6ec6833e4ae8825b5be55016ee184bae70a7f3f3c5b9fb85b9db04

    • SHA512

      c6318442829362f3f111399eb4f906ed2f9a3eb18d3d31c348ced1590644cf5893a37c4bc0c1aaecbf312ae90a89932052ae3ba594667e0c18e34c4264836033

    • SSDEEP

      24576:RuLX7bHsMQ4/O6yMLprOInyT/Swl8Mi9:RuLXvYMLprznyDSga9

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks