Overview

overview

7

Static

static

3

6f825f0002...57.exe

windows7-x64

7

6f825f0002...57.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    6f825f000291fe9aee5477a5c862ea9e8d3d8b38c22a547f8065553cc95fa457

  • Size

    659KB

  • Sample

    240810-2nf4jasapl

  • MD5

    6c4ed59aee1ddca6c354e8a5d890fc43

  • SHA1

    e0fe5a1c9c28f7dc9051654dcb57f14cc83ec676

  • SHA256

    6f825f000291fe9aee5477a5c862ea9e8d3d8b38c22a547f8065553cc95fa457

  • SHA512

    ae8f0a45a1c0db491006594134d4da4efaf0a4eff9d23a663109c28bb14066f0e0d7f3258640c02481ff92f2005ab3084c34d3e54e329a82cf3e2ad5da2a5498

  • SSDEEP

    12288:ujHi7UMAdB8qr0zw9iXQ40AOzDr5YJjsF/5v3ZkHRik8Z:ujC7atr0zAiX90z/F0jsFB3SQke

Score
7/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      6f825f000291fe9aee5477a5c862ea9e8d3d8b38c22a547f8065553cc95fa457

    • Size

      659KB

    • MD5

      6c4ed59aee1ddca6c354e8a5d890fc43

    • SHA1

      e0fe5a1c9c28f7dc9051654dcb57f14cc83ec676

    • SHA256

      6f825f000291fe9aee5477a5c862ea9e8d3d8b38c22a547f8065553cc95fa457

    • SHA512

      ae8f0a45a1c0db491006594134d4da4efaf0a4eff9d23a663109c28bb14066f0e0d7f3258640c02481ff92f2005ab3084c34d3e54e329a82cf3e2ad5da2a5498

    • SSDEEP

      12288:ujHi7UMAdB8qr0zw9iXQ40AOzDr5YJjsF/5v3ZkHRik8Z:ujC7atr0zAiX90z/F0jsFB3SQke

    Score
    7/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks