Overview

overview

9

Static

static

3

file.exe

windows7-x64

9

file.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    file.exe

  • Size

    538KB

  • Sample

    240809-pgldfsvajb

  • MD5

    913bdfccaaed0a1ed80d2c52e5f5d7c3

  • SHA1

    9befba3d43ace45a777d2e936e1046e7a0fb634c

  • SHA256

    93e66ad3eea5b3217d9a016cb96951ab2dd0ae3f3ef6c2782667abacaaa8018f

  • SHA512

    1999d174e14b96ccb35dc8ffa2cc576aff9d01d9373654a2a0f78342735e8b637f605144f5c56e922dc5ee43afb82e62ab9f21e0ecfd33a1b8369344346f90e6

  • SSDEEP

    6144:EYqdc0NkzDV4L3eTIlA414pcN3p0NIb88WsNMPaKFP3b2V122J0sL:E9J8+jP4cN3CNIb88WsNMP5F1k

Score
9/10
credential_accessdiscoveryspywarestealer

Malware Config

Targets

    • Target

      file.exe

    • Size

      538KB

    • MD5

      913bdfccaaed0a1ed80d2c52e5f5d7c3

    • SHA1

      9befba3d43ace45a777d2e936e1046e7a0fb634c

    • SHA256

      93e66ad3eea5b3217d9a016cb96951ab2dd0ae3f3ef6c2782667abacaaa8018f

    • SHA512

      1999d174e14b96ccb35dc8ffa2cc576aff9d01d9373654a2a0f78342735e8b637f605144f5c56e922dc5ee43afb82e62ab9f21e0ecfd33a1b8369344346f90e6

    • SSDEEP

      6144:EYqdc0NkzDV4L3eTIlA414pcN3p0NIb88WsNMPaKFP3b2V122J0sL:E9J8+jP4cN3CNIb88WsNMP5F1k

    Score
    9/10
    credential_accessdiscoveryspywarestealer

    • Credentials from Password Stores: Credentials from Web Browsers

      Malicious Access or copy of Web Browser Credential store.

      credential_accessstealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks