Overview

overview

7

Static

static

3

ade4fd9abd...0N.exe

windows7-x64

7

ade4fd9abd...0N.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    ade4fd9abd672bf7249d17a19e4869b0N.exe

  • Size

    1.4MB

  • Sample

    240722-pe6llsxame

  • MD5

    ade4fd9abd672bf7249d17a19e4869b0

  • SHA1

    897fcdfb27563a9d9a5b105411828322b74e9c65

  • SHA256

    76fa6ecc75e1ae0527777236f89027b1bb7b61224e9bea42ef6aeacaae5d5823

  • SHA512

    f0de3abde8903720d25e59c2220b9ae5571cafe125b753eaeb44abc25c358df30fa30e373153eb70dbe4c24e375b3a6fc24c3cc32dc788c35c31fdaa69097f2d

  • SSDEEP

    24576:oWUht8iDYSK71k5SKR0h1cJCOjUd7j4fV4/xKGqrd62CIXRMncXlPpEyqqSoldG:VCMSKxfKRuiJNjUdn494/xKGyxLRM6Jq

Score
7/10
persistencespywarestealer

Malware Config

Targets

    • Target

      ade4fd9abd672bf7249d17a19e4869b0N.exe

    • Size

      1.4MB

    • MD5

      ade4fd9abd672bf7249d17a19e4869b0

    • SHA1

      897fcdfb27563a9d9a5b105411828322b74e9c65

    • SHA256

      76fa6ecc75e1ae0527777236f89027b1bb7b61224e9bea42ef6aeacaae5d5823

    • SHA512

      f0de3abde8903720d25e59c2220b9ae5571cafe125b753eaeb44abc25c358df30fa30e373153eb70dbe4c24e375b3a6fc24c3cc32dc788c35c31fdaa69097f2d

    • SSDEEP

      24576:oWUht8iDYSK71k5SKR0h1cJCOjUd7j4fV4/xKGqrd62CIXRMncXlPpEyqqSoldG:VCMSKxfKRuiJNjUdn494/xKGyxLRM6Jq

    Score
    7/10
    persistencespywarestealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks