Overview

overview

7

Static

static

3

0641bd8c04...0N.exe

windows7-x64

7

0641bd8c04...0N.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    0641bd8c04806e04f67339e8dc84ddf0N.exe

  • Size

    3.2MB

  • Sample

    240711-zbnlqsvgja

  • MD5

    0641bd8c04806e04f67339e8dc84ddf0

  • SHA1

    62a7f448f27886ec3d1a40baed2f1188fafd60b4

  • SHA256

    6be9a13228a85831f34afc88a435ff399a785ebb4e4baf2f07a0becb0820dc0c

  • SHA512

    d8fc5bc37eb62043bd82b0c5bc7b40b55f730fdf79e77ec682e8b361070a0cd65078e10e4b61504c0c66bb4b3476c364c77e1925b80a2474c9c3126ed561ad09

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBBB/bSqz8b6LNXJqI20t:sxX7QnxrloE5dpUpSbVz8eLFcz

Score
7/10
persistencespywarestealer

Malware Config

Targets

    • Target

      0641bd8c04806e04f67339e8dc84ddf0N.exe

    • Size

      3.2MB

    • MD5

      0641bd8c04806e04f67339e8dc84ddf0

    • SHA1

      62a7f448f27886ec3d1a40baed2f1188fafd60b4

    • SHA256

      6be9a13228a85831f34afc88a435ff399a785ebb4e4baf2f07a0becb0820dc0c

    • SHA512

      d8fc5bc37eb62043bd82b0c5bc7b40b55f730fdf79e77ec682e8b361070a0cd65078e10e4b61504c0c66bb4b3476c364c77e1925b80a2474c9c3126ed561ad09

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBBB/bSqz8b6LNXJqI20t:sxX7QnxrloE5dpUpSbVz8eLFcz

    Score
    7/10
    persistencespywarestealer

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks