Overview

overview

9

Static

static

5

0b397bab4a...1c.exe

windows7-x64

9

0b397bab4a...1c.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    0b397bab4a492600e1460e007112d9cbd73a1417c42c7e2e3d474ea778a2451c.exe

  • Size

    896KB

  • Sample

    240825-kdwb2awfpr

  • MD5

    834193120db2221a085e9b1efa25f4d6

  • SHA1

    80969fad2ebcfc4407caa48d85114f11ac122f49

  • SHA256

    0b397bab4a492600e1460e007112d9cbd73a1417c42c7e2e3d474ea778a2451c

  • SHA512

    e3a0529c8b304dc2132002e5a2d840331c76c0783344ec6fbaa20264953ab9a942e18642721f9155d9c3f5807ded529f850857d896ab220e8db5697f47b9b6d0

  • SSDEEP

    12288:rqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDgarTL:rqDEvCTbMWu7rQYlBQcBiT6rprG8avL

Score
9/10
credential_accessdiscoverystealer

Malware Config

Targets

    • Target

      0b397bab4a492600e1460e007112d9cbd73a1417c42c7e2e3d474ea778a2451c.exe

    • Size

      896KB

    • MD5

      834193120db2221a085e9b1efa25f4d6

    • SHA1

      80969fad2ebcfc4407caa48d85114f11ac122f49

    • SHA256

      0b397bab4a492600e1460e007112d9cbd73a1417c42c7e2e3d474ea778a2451c

    • SHA512

      e3a0529c8b304dc2132002e5a2d840331c76c0783344ec6fbaa20264953ab9a942e18642721f9155d9c3f5807ded529f850857d896ab220e8db5697f47b9b6d0

    • SSDEEP

      12288:rqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDgarTL:rqDEvCTbMWu7rQYlBQcBiT6rprG8avL

    Score
    9/10
    credential_accessdiscoverystealer

    • Credentials from Password Stores: Credentials from Web Browsers

      Malicious Access or copy of Web Browser Credential store.

      credential_accessstealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks