Overview

overview

9

Static

static

3

d4b43a85bf...e6.exe

windows7-x64

9

d4b43a85bf...e6.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    d4b43a85bfcebd5e5ee24d6d126a7bd2619b0a7546cb1f027164f5eafd4911e6.exe

  • Size

    1.8MB

  • Sample

    240803-crp36szdrk

  • MD5

    0695a860416965e0c114e763b0ef9c90

  • SHA1

    ab598bcd9c430e50edc8b968f563789270a86749

  • SHA256

    d4b43a85bfcebd5e5ee24d6d126a7bd2619b0a7546cb1f027164f5eafd4911e6

  • SHA512

    0eb2b3aabba1705694b6f234dceadaacd8f400f278acc84a26d6478dd7c7fd48539a84467a08f8d15e2fa699e800fbdca61b42f53881c0d046d01075a7762810

  • SSDEEP

    24576:5xOxsGhNDB6RlqKeFDrv3IFUMGxTZBW77cU17Uk2HQE+AXAmOzmmbQTVnevtDP41:2bH1rvoU9JZB67cUxgwiIIgVLhha

Score
9/10
credential_accessspywarestealer

Malware Config

Targets

    • Target

      d4b43a85bfcebd5e5ee24d6d126a7bd2619b0a7546cb1f027164f5eafd4911e6.exe

    • Size

      1.8MB

    • MD5

      0695a860416965e0c114e763b0ef9c90

    • SHA1

      ab598bcd9c430e50edc8b968f563789270a86749

    • SHA256

      d4b43a85bfcebd5e5ee24d6d126a7bd2619b0a7546cb1f027164f5eafd4911e6

    • SHA512

      0eb2b3aabba1705694b6f234dceadaacd8f400f278acc84a26d6478dd7c7fd48539a84467a08f8d15e2fa699e800fbdca61b42f53881c0d046d01075a7762810

    • SSDEEP

      24576:5xOxsGhNDB6RlqKeFDrv3IFUMGxTZBW77cU17Uk2HQE+AXAmOzmmbQTVnevtDP41:2bH1rvoU9JZB67cUxgwiIIgVLhha

    Score
    9/10
    credential_accessspywarestealer

    • Credentials from Password Stores: Credentials from Web Browsers

      Malicious Access or copy of Web Browser Credential store.

      credential_accessstealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks