Overview

overview

9

Static

static

3

005c8eecb1...0N.exe

windows7-x64

9

005c8eecb1...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    005c8eecb10f6067072a3076b25c40f0N.exe

  • Size

    2.6MB

  • Sample

    240726-njfejsycnf

  • MD5

    005c8eecb10f6067072a3076b25c40f0

  • SHA1

    d0e3aa65b7e10d5bc8886457a0a5d535e96c5289

  • SHA256

    3a2751531804c6a9506569a90a8abeb3f0901b40b9bd66494fea135df8cefeba

  • SHA512

    03c76d936b7e66a13a917cfa8a62a68ec75d657f0a0ac4df6869651d22304ea6ebb36a2957890cfa3deca153c802f4b04c026427e8c20e7372908b4f94ce2bdb

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LByB/bS:sxX7QnxrloE5dpUpBb

Score
9/10
credential_accessdiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      005c8eecb10f6067072a3076b25c40f0N.exe

    • Size

      2.6MB

    • MD5

      005c8eecb10f6067072a3076b25c40f0

    • SHA1

      d0e3aa65b7e10d5bc8886457a0a5d535e96c5289

    • SHA256

      3a2751531804c6a9506569a90a8abeb3f0901b40b9bd66494fea135df8cefeba

    • SHA512

      03c76d936b7e66a13a917cfa8a62a68ec75d657f0a0ac4df6869651d22304ea6ebb36a2957890cfa3deca153c802f4b04c026427e8c20e7372908b4f94ce2bdb

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LByB/bS:sxX7QnxrloE5dpUpBb

    Score
    9/10
    credential_accessdiscoverypersistencespywarestealer

    • Credentials from Password Stores: Credentials from Web Browsers

      Malicious Access or copy of Web Browser Credential store.

      credential_accessstealer

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks