Overview

overview

9

Static

static

3

c9ebf1a6c9...d0.exe

windows7-x64

9

c9ebf1a6c9...d0.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    c9ebf1a6c9da0bd63630bd16546388b0b798388352e4fdfb22ce22ba1144c1d0

  • Size

    89KB

  • Sample

    240805-m6ldmsvajk

  • MD5

    8f20be0bb6551d7c339a024a1da57cc1

  • SHA1

    378aa6232d12adf08eb04c5d990ce4f28e6a79af

  • SHA256

    c9ebf1a6c9da0bd63630bd16546388b0b798388352e4fdfb22ce22ba1144c1d0

  • SHA512

    9275da6bdfac408a7dbabd022f005c9e53132f831ba717e8978505209bb6a98117f14b966f55b748ca60adfbeb11acee96e6cf93550528a747895f7d6a8fd877

  • SSDEEP

    1536:L7fPGykbOqjoHm4pICdfkLtAfupcWX50MxFY+yIOlnToIfUxEpZUO+:Hq6+ouCpk2mpcWJ0r+QNTBfUCpZ2

Score
9/10
credential_accessdiscoverystealer

Malware Config

Targets

    • Target

      c9ebf1a6c9da0bd63630bd16546388b0b798388352e4fdfb22ce22ba1144c1d0

    • Size

      89KB

    • MD5

      8f20be0bb6551d7c339a024a1da57cc1

    • SHA1

      378aa6232d12adf08eb04c5d990ce4f28e6a79af

    • SHA256

      c9ebf1a6c9da0bd63630bd16546388b0b798388352e4fdfb22ce22ba1144c1d0

    • SHA512

      9275da6bdfac408a7dbabd022f005c9e53132f831ba717e8978505209bb6a98117f14b966f55b748ca60adfbeb11acee96e6cf93550528a747895f7d6a8fd877

    • SSDEEP

      1536:L7fPGykbOqjoHm4pICdfkLtAfupcWX50MxFY+yIOlnToIfUxEpZUO+:Hq6+ouCpk2mpcWJ0r+QNTBfUCpZ2

    Score
    9/10
    credential_accessdiscoverystealer

    • Credentials from Password Stores: Credentials from Web Browsers

      Malicious Access or copy of Web Browser Credential store.

      credential_accessstealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks