Overview

overview

9

Static

static

5

fd2b01c9d4...a0.exe

windows7-x64

9

fd2b01c9d4...a0.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fd2b01c9d499e970cf0320aaab9acece40d14949b22e40613cffdfda621141a0.exe

  • Size

    896KB

  • Sample

    240825-pfr5lsvgpk

  • MD5

    4f083d220b0b91a3332be0404aed011e

  • SHA1

    f8de24fa77d1bb1d2f8089a2104e3ca462fc4da8

  • SHA256

    fd2b01c9d499e970cf0320aaab9acece40d14949b22e40613cffdfda621141a0

  • SHA512

    b71786e52d42aa77ff58c644392506df5fc5ddcdc49d75605a2d4e21d4f17d5662fcd1676e6eb22a530b5718e541a3452fcd8a2237bf6388b9bb2ffef0628797

  • SSDEEP

    12288:JqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDgarT/:JqDEvCTbMWu7rQYlBQcBiT6rprG8av/

Score
9/10
credential_accessdiscoverystealer

Malware Config

Targets

    • Target

      fd2b01c9d499e970cf0320aaab9acece40d14949b22e40613cffdfda621141a0.exe

    • Size

      896KB

    • MD5

      4f083d220b0b91a3332be0404aed011e

    • SHA1

      f8de24fa77d1bb1d2f8089a2104e3ca462fc4da8

    • SHA256

      fd2b01c9d499e970cf0320aaab9acece40d14949b22e40613cffdfda621141a0

    • SHA512

      b71786e52d42aa77ff58c644392506df5fc5ddcdc49d75605a2d4e21d4f17d5662fcd1676e6eb22a530b5718e541a3452fcd8a2237bf6388b9bb2ffef0628797

    • SSDEEP

      12288:JqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDgarT/:JqDEvCTbMWu7rQYlBQcBiT6rprG8av/

    Score
    9/10
    credential_accessdiscoverystealer

    • Credentials from Password Stores: Credentials from Web Browsers

      Malicious Access or copy of Web Browser Credential store.

      credential_accessstealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks