Overview

overview

9

Static

static

3

1b6b55065b...0N.exe

windows7-x64

9

1b6b55065b...0N.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1b6b55065b7efbc052ea8d16ebdfca20N.exe

  • Size

    336KB

  • Sample

    240723-2zn9aaxaqc

  • MD5

    1b6b55065b7efbc052ea8d16ebdfca20

  • SHA1

    e1cd184eed07512e365780e40e312e37f49f218c

  • SHA256

    8f42732f228366698a0937f5128834df4f3b159ce67b13706ba76f9bec591ccc

  • SHA512

    8fb43f76bd5a43fdc6360df892ae8d406aca2f7e3f8e31a1b46c60d61951b237df54a93bd50e43ebfe095960062b63d4ef5613b3de99f6a256ca72bf9d479318

  • SSDEEP

    6144:f6Zz5kismgTlhD21vfNct0QYonLsXRXdNmP84ynEd7ON9SzmzM0N4aYMCq:fmz5kismyONct8ong9dNEiEdaNUqwkz1

Score
9/10
credential_accessdiscoveryspywarestealer

Malware Config

Targets

    • Target

      1b6b55065b7efbc052ea8d16ebdfca20N.exe

    • Size

      336KB

    • MD5

      1b6b55065b7efbc052ea8d16ebdfca20

    • SHA1

      e1cd184eed07512e365780e40e312e37f49f218c

    • SHA256

      8f42732f228366698a0937f5128834df4f3b159ce67b13706ba76f9bec591ccc

    • SHA512

      8fb43f76bd5a43fdc6360df892ae8d406aca2f7e3f8e31a1b46c60d61951b237df54a93bd50e43ebfe095960062b63d4ef5613b3de99f6a256ca72bf9d479318

    • SSDEEP

      6144:f6Zz5kismgTlhD21vfNct0QYonLsXRXdNmP84ynEd7ON9SzmzM0N4aYMCq:fmz5kismyONct8ong9dNEiEdaNUqwkz1

    Score
    9/10
    credential_accessdiscoveryspywarestealer

    • Credentials from Password Stores: Credentials from Web Browsers

      Malicious Access or copy of Web Browser Credential store.

      credential_accessstealer

    • Credentials from Password Stores: Windows Credential Manager

      Suspicious access to Credentials History.

      credential_accessstealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks