Overview

overview

7

Static

static

3

ac5bf8bbd3...0N.exe

windows7-x64

7

ac5bf8bbd3...0N.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    ac5bf8bbd3379aea1185cbded6d08a70N.exe

  • Size

    636KB

  • Sample

    240721-mdxk7sycjf

  • MD5

    ac5bf8bbd3379aea1185cbded6d08a70

  • SHA1

    2ae4167900b78a882037d304a55540a8f777fee7

  • SHA256

    43e5942ea754eaae230a165f45d05e7649c8ed94062f30543931712b5d14193a

  • SHA512

    157654eea034511505ecc7c6c7fd3fb685ce178020f2cc31b1f9517909df439594520caee3f461f2470ab9b26621e8901d85c9003ad395a366eff8ade168af82

  • SSDEEP

    12288:OWji9Bw+8EyDOpDFQUFC0K5zo+Te9GRg5RtNKWp86VgIdhKmMrtV/gk1WN:Cw+8EyDQs0K5zo+zg5RttuSKRxLa

Score
7/10
persistencespywarestealer

Malware Config

Targets

    • Target

      ac5bf8bbd3379aea1185cbded6d08a70N.exe

    • Size

      636KB

    • MD5

      ac5bf8bbd3379aea1185cbded6d08a70

    • SHA1

      2ae4167900b78a882037d304a55540a8f777fee7

    • SHA256

      43e5942ea754eaae230a165f45d05e7649c8ed94062f30543931712b5d14193a

    • SHA512

      157654eea034511505ecc7c6c7fd3fb685ce178020f2cc31b1f9517909df439594520caee3f461f2470ab9b26621e8901d85c9003ad395a366eff8ade168af82

    • SSDEEP

      12288:OWji9Bw+8EyDOpDFQUFC0K5zo+Te9GRg5RtNKWp86VgIdhKmMrtV/gk1WN:Cw+8EyDQs0K5zo+zg5RttuSKRxLa

    Score
    7/10
    persistencespywarestealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks