Overview

overview

7

Static

static

3

562d39e29d...0N.exe

windows7-x64

7

562d39e29d...0N.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    562d39e29dfbf451eda6024995f7b0d0N.exe

  • Size

    1.9MB

  • Sample

    240723-djs1javarj

  • MD5

    562d39e29dfbf451eda6024995f7b0d0

  • SHA1

    ce90ac23ec62bd2f6bf3f5d752388d8a8ba70fe7

  • SHA256

    cc9f12f086c8ff74a8aad6e691ebdd2716c5e45a916835845b545150d651e7e6

  • SHA512

    9ff29bfbc9c3df5a9e3353ffe98eaa32f45b59985dbc5893c2315c2aaa5a62abe3195ea312b6b608ac8cc6a9066276491903d9d8e6d6036b110c42b2879af5ec

  • SSDEEP

    49152:VqO7Vkdmxy5By6ob0ZHBBaIbpJMva0kIX/Fv+okSvb:wOZVxYBy6oYZHptcafIXdbxvb

Score
7/10
persistencespywarestealer

Malware Config

Targets

    • Target

      562d39e29dfbf451eda6024995f7b0d0N.exe

    • Size

      1.9MB

    • MD5

      562d39e29dfbf451eda6024995f7b0d0

    • SHA1

      ce90ac23ec62bd2f6bf3f5d752388d8a8ba70fe7

    • SHA256

      cc9f12f086c8ff74a8aad6e691ebdd2716c5e45a916835845b545150d651e7e6

    • SHA512

      9ff29bfbc9c3df5a9e3353ffe98eaa32f45b59985dbc5893c2315c2aaa5a62abe3195ea312b6b608ac8cc6a9066276491903d9d8e6d6036b110c42b2879af5ec

    • SSDEEP

      49152:VqO7Vkdmxy5By6ob0ZHBBaIbpJMva0kIX/Fv+okSvb:wOZVxYBy6oYZHptcafIXdbxvb

    Score
    7/10
    persistencespywarestealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks