Overview

overview

7

Static

static

3

2024-08-07...il.exe

windows7-x64

7

2024-08-07...il.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-08-07_59e820f9a039aad932bce1648d068160_avoslocker_revil

  • Size

    4.8MB

  • Sample

    240807-ssmx7stcqh

  • MD5

    59e820f9a039aad932bce1648d068160

  • SHA1

    08b21a7dd3ae1bce865ce331d25a1c7653d8dfa9

  • SHA256

    cd46953f4a08e13ed1d5102bac2933802e5a29be320a9cbb7ab86d367a833544

  • SHA512

    56489f911e566df48e14f26fe88a4c4b7c6c1704eaa2eb43c96624dc31edb2855217bca87fb4e44cc1226f17998f5e7fed90bc89a38fd57673be8d8e6f5c42ff

  • SSDEEP

    98304:iCV3sN8eorV6ntDhSoc7w91NW8Fu++flWPSeonfv0:x3sNborV6Zv3pu+qWufv0

Score
7/10
discoverypersistencespywarestealer

Malware Config

Targets

    • Target

      2024-08-07_59e820f9a039aad932bce1648d068160_avoslocker_revil

    • Size

      4.8MB

    • MD5

      59e820f9a039aad932bce1648d068160

    • SHA1

      08b21a7dd3ae1bce865ce331d25a1c7653d8dfa9

    • SHA256

      cd46953f4a08e13ed1d5102bac2933802e5a29be320a9cbb7ab86d367a833544

    • SHA512

      56489f911e566df48e14f26fe88a4c4b7c6c1704eaa2eb43c96624dc31edb2855217bca87fb4e44cc1226f17998f5e7fed90bc89a38fd57673be8d8e6f5c42ff

    • SSDEEP

      98304:iCV3sN8eorV6ntDhSoc7w91NW8Fu++flWPSeonfv0:x3sNborV6Zv3pu+qWufv0

    Score
    7/10
    discoveryspywarestealerpersistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks