Overview

overview

7

Static

static

3

939a70007d...0N.exe

windows7-x64

7

939a70007d...0N.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    939a70007d4c4ae6f2b45f5fcc49cf70N.exe

  • Size

    272KB

  • Sample

    240722-llgdhszglh

  • MD5

    939a70007d4c4ae6f2b45f5fcc49cf70

  • SHA1

    2935eca91003295689f19c1ce4e9f7bd5a6b7dd9

  • SHA256

    3e11f9e29d612f220eb9a6c8ae02ee51df3c89d4fc3647741ac7b8bd757889d0

  • SHA512

    3d942ada6fa5299a2f580522417a371ce172da57cc0b289ad0cbdb0bd1d6fb2be6240e603fb9f544cdc9410ba45f8767d553b6eb928721dc3e34147a9e28f1e8

  • SSDEEP

    6144:dXC4vgmhbIxs3NBRJpCvw5Bd4tGzkODHbTdL4QECG+98ri:dXCNi9BpCQYUzk2a1t++i

Score
7/10
persistencespywarestealer

Malware Config

Targets

    • Target

      939a70007d4c4ae6f2b45f5fcc49cf70N.exe

    • Size

      272KB

    • MD5

      939a70007d4c4ae6f2b45f5fcc49cf70

    • SHA1

      2935eca91003295689f19c1ce4e9f7bd5a6b7dd9

    • SHA256

      3e11f9e29d612f220eb9a6c8ae02ee51df3c89d4fc3647741ac7b8bd757889d0

    • SHA512

      3d942ada6fa5299a2f580522417a371ce172da57cc0b289ad0cbdb0bd1d6fb2be6240e603fb9f544cdc9410ba45f8767d553b6eb928721dc3e34147a9e28f1e8

    • SSDEEP

      6144:dXC4vgmhbIxs3NBRJpCvw5Bd4tGzkODHbTdL4QECG+98ri:dXCNi9BpCQYUzk2a1t++i

    Score
    7/10
    persistencespywarestealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks