Overview

overview

9

Static

static

5

proforma invoice.exe

windows7-x64

5

proforma invoice.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    8dd6bcdb9c84e46dfeac6a33605b882a3eeceae2847a47b695de45ee649316a7

  • Size

    702KB

  • Sample

    240823-bpc56azglm

  • MD5

    938e37cf867d9686bfd8185dcdb031f5

  • SHA1

    a1b2f7e750c9ae0c5661023d8f087be16930e472

  • SHA256

    8dd6bcdb9c84e46dfeac6a33605b882a3eeceae2847a47b695de45ee649316a7

  • SHA512

    ee23314d92370b6683c784dcb5e84d12cda3b4900429bc97820d61d64f1758c58cec3874516f20def513f2b34dbc4c6f71f872da3693db267d563ac36417cf1e

  • SSDEEP

    12288:DZ/01traYN6dZ+cTlKTXrS/Mdk9C36WSWQ0JKM0XuoUwHmoH1b3PWC93pH41dl+:DZ/01tKAcUbYMGc36fWQ0J90XfxVU0

Score
9/10
credential_accessdiscoverystealer

Malware Config

Targets

    • Target

      proforma invoice.exe

    • Size

      1.2MB

    • MD5

      77f8da00f3632972d585ff7efb0bea8c

    • SHA1

      987ce549f5b8bb619bd78e5f88ae3cd132bb8f34

    • SHA256

      aab17e4d4fcb75ffc655247c8f71df23d653b9b573d87eb2e32c589c543918f9

    • SHA512

      5b18f05dcb866aad05c25f792f3646c75444a3daf7abb52b2b5331c2a6764c9affea90735d0061d615f0a2c55226262d08b59c98c3c7cbe44528c621fd1fac16

    • SSDEEP

      24576:fqDEvCTbMWu7rQYlBQcBiT6rprG8aEnfOYbNoY5cap:fTvC/MTQYxsWR7aEfOYbNs

    Score
    9/10
    discoverycredential_accessstealer

    • Credentials from Password Stores: Credentials from Web Browsers

      Malicious Access or copy of Web Browser Credential store.

      credential_accessstealer

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks