Overview

overview

7

Static

static

3

3f7c963418...0N.exe

windows7-x64

7

3f7c963418...0N.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    3f7c963418946ecadb66c4f47c019390N.exe

  • Size

    1.8MB

  • Sample

    240817-c9cwkashpe

  • MD5

    3f7c963418946ecadb66c4f47c019390

  • SHA1

    5e8f778563481761f77fbef119de94f45ada3bea

  • SHA256

    6820939a8b04d3a95a34bad5f068444973231ebc87f09f56b796a40e44e0d1cd

  • SHA512

    4d52b04d20b30f146745f5bd7d1e867ec4125667fcb7df3dc9d07fe45a254b9e7af34ccd798718f0d99c536c0a777caf6c0eb8f73da9afd3595dead53f64e2d0

  • SSDEEP

    49152:vhiHProthLzgDUYmvFur31yAipQCtXxc0H:OroPWU7dG1yfpVBlH

Score
7/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      3f7c963418946ecadb66c4f47c019390N.exe

    • Size

      1.8MB

    • MD5

      3f7c963418946ecadb66c4f47c019390

    • SHA1

      5e8f778563481761f77fbef119de94f45ada3bea

    • SHA256

      6820939a8b04d3a95a34bad5f068444973231ebc87f09f56b796a40e44e0d1cd

    • SHA512

      4d52b04d20b30f146745f5bd7d1e867ec4125667fcb7df3dc9d07fe45a254b9e7af34ccd798718f0d99c536c0a777caf6c0eb8f73da9afd3595dead53f64e2d0

    • SSDEEP

      49152:vhiHProthLzgDUYmvFur31yAipQCtXxc0H:OroPWU7dG1yfpVBlH

    Score
    7/10
    discoveryspywarestealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks