Overview

overview

7

Static

static

3

4c9e072bc8...47.exe

windows7-x64

7

4c9e072bc8...47.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    4c9e072bc8145d0aef036d1299645f8cca559c4591708474b29f30e1a2ef5347

  • Size

    3.1MB

  • Sample

    240709-1yzg7aycmk

  • MD5

    12bebc2e8b7413f50da0baf914cca0a9

  • SHA1

    ff9833f9497c0aab210a4c3c2378d5a20dc5a4c4

  • SHA256

    4c9e072bc8145d0aef036d1299645f8cca559c4591708474b29f30e1a2ef5347

  • SHA512

    230e184602627992660b862877953df653e3c50fd8d38650a1aee7c7873ab33569afcdd6c03afe4b37961db99ec2c73d2891a4a26682ba0ad8c5d91559b67dd2

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBlB/bSqz8:sxX7QnxrloE5dpUp+bVz8

Score
7/10
persistencespywarestealer

Malware Config

Targets

    • Target

      4c9e072bc8145d0aef036d1299645f8cca559c4591708474b29f30e1a2ef5347

    • Size

      3.1MB

    • MD5

      12bebc2e8b7413f50da0baf914cca0a9

    • SHA1

      ff9833f9497c0aab210a4c3c2378d5a20dc5a4c4

    • SHA256

      4c9e072bc8145d0aef036d1299645f8cca559c4591708474b29f30e1a2ef5347

    • SHA512

      230e184602627992660b862877953df653e3c50fd8d38650a1aee7c7873ab33569afcdd6c03afe4b37961db99ec2c73d2891a4a26682ba0ad8c5d91559b67dd2

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBlB/bSqz8:sxX7QnxrloE5dpUp+bVz8

    Score
    7/10
    persistencespywarestealer

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks