bb44bbc31943b2af3d4aea7301a73661fd086b9eacf8bc853935b4f0e57822d1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ApkFucker.exe
Size

31.8MB
Sample

240725-m2x7msxfpf
MD5

72d95dd566a9653acce2063bb036efbd
SHA1

21b1169aa055ce8f86fe5fe72426a9cf2f7d8ac8
SHA256

bb44bbc31943b2af3d4aea7301a73661fd086b9eacf8bc853935b4f0e57822d1
SHA512

5e247a9ef801411629bc311b51cc6a55a215f8a8b26470ca642c881d51c8b6c460117ebd7357cfb9aca2d448d25b6aacff7ae29012792f2d7d328fd01156bdbe
SSDEEP

786432:ZaAWDDiR01+l+uqgvz1QtIJ2j6+s7LWB75zuPNSKnYjfwGK:ZaPiR01CppiIJ2qHWB75iVjYsG

Score

9^/10

credential_access discovery persistence privilege_escalation pyinstaller spyware stealer

Malware Config

Targets

- Target
  
  ApkFucker.exe
- Size
  
  31.8MB
- MD5
  
  72d95dd566a9653acce2063bb036efbd
- SHA1
  
  21b1169aa055ce8f86fe5fe72426a9cf2f7d8ac8
- SHA256
  
  bb44bbc31943b2af3d4aea7301a73661fd086b9eacf8bc853935b4f0e57822d1
- SHA512
  
  5e247a9ef801411629bc311b51cc6a55a215f8a8b26470ca642c881d51c8b6c460117ebd7357cfb9aca2d448d25b6aacff7ae29012792f2d7d328fd01156bdbe
- SSDEEP
  
  786432:ZaAWDDiR01+l+uqgvz1QtIJ2j6+s7LWB75zuPNSKnYjfwGK:ZaPiR01CppiIJ2qHWB75iVjYsG
Score

9^/10

credential_access discovery persistence privilege_escalation spyware stealer
- Credentials from Password Stores: Credentials from Web Browsers
  Malicious Access or copy of Web Browser Credential store.
  credential_access stealer
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Legitimate hosting services abused for malware hosting/C2
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Credential Access

Credentials from Password Stores

Credentials from Web Browsers

Unsecured Credentials

Credentials In Files

Discovery

Browser Information Discovery

System Network Configuration Discovery

Wi-Fi Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

credential_accessdiscoverypersistenceprivilege_escalationspywarestealer