Overview

overview

9

Static

static

5

file.exe

windows7-x64

9

file.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    file.exe

  • Size

    896KB

  • Sample

    240905-pphbrs1gmh

  • MD5

    9174e680d1b0ea8cdb3ee932ec2dfc6f

  • SHA1

    49ba7df579d1b30e9c4474ba6733748614ab5c68

  • SHA256

    136d5473ded4b9a2bef3ef6160a377c0965b4e7292fb81980219ef8cc7d96cfd

  • SHA512

    de67a3bbe4a4ebe5bce9e039d9a111ad65885baeb0a8da3412bf8694d1bbfddf39d2175478e69ae36395d5f550c457c899582d7388c0c1a39c0094c3de1f1d0a

  • SSDEEP

    12288:UqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDgarTP:UqDEvCTbMWu7rQYlBQcBiT6rprG8avP

Score
9/10
credential_accessdiscoverystealer

Malware Config

Targets

    • Target

      file.exe

    • Size

      896KB

    • MD5

      9174e680d1b0ea8cdb3ee932ec2dfc6f

    • SHA1

      49ba7df579d1b30e9c4474ba6733748614ab5c68

    • SHA256

      136d5473ded4b9a2bef3ef6160a377c0965b4e7292fb81980219ef8cc7d96cfd

    • SHA512

      de67a3bbe4a4ebe5bce9e039d9a111ad65885baeb0a8da3412bf8694d1bbfddf39d2175478e69ae36395d5f550c457c899582d7388c0c1a39c0094c3de1f1d0a

    • SSDEEP

      12288:UqDEvFo+yo4DdbbMWu/jrQu4M9lBAlKhQcDGB3cuBNGE6iOrpfe4JdaDgarTP:UqDEvCTbMWu7rQYlBQcBiT6rprG8avP

    Score
    9/10
    credential_accessdiscoverystealer

    • Credentials from Password Stores: Credentials from Web Browsers

      Malicious Access or copy of Web Browser Credential store.

      credential_accessstealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks