Overview

overview

9

Static

static

3

99463624ea...0N.exe

windows7-x64

9

99463624ea...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    99463624ea37ccf6480be48fe8b43d90N.exe

  • Size

    2.6MB

  • Sample

    240906-2xcgpssbkm

  • MD5

    99463624ea37ccf6480be48fe8b43d90

  • SHA1

    97e63d8e72b90bde1b2ad8f4684ee07bfaf302f4

  • SHA256

    81ab6b6337b1797f2c40d56ce8ae30e14dcc6106c5f7f162cf95a1f44544034f

  • SHA512

    dd987cf5fbc57000c0f73a2935af948faa87ac34ce39244f2afddb2583de96f821a1934546d0e276fb398d0f4ea1a9279e83f4e34442c866d67e8226acd2d033

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBxB/bS:sxX7QnxrloE5dpUpab

Score
9/10
credential_accessdiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      99463624ea37ccf6480be48fe8b43d90N.exe

    • Size

      2.6MB

    • MD5

      99463624ea37ccf6480be48fe8b43d90

    • SHA1

      97e63d8e72b90bde1b2ad8f4684ee07bfaf302f4

    • SHA256

      81ab6b6337b1797f2c40d56ce8ae30e14dcc6106c5f7f162cf95a1f44544034f

    • SHA512

      dd987cf5fbc57000c0f73a2935af948faa87ac34ce39244f2afddb2583de96f821a1934546d0e276fb398d0f4ea1a9279e83f4e34442c866d67e8226acd2d033

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LBxB/bS:sxX7QnxrloE5dpUpab

    Score
    9/10
    credential_accessdiscoverypersistencespywarestealer

    • Credentials from Password Stores: Credentials from Web Browsers

      Malicious Access or copy of Web Browser Credential store.

      credential_accessstealer

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks