Overview

overview

9

Static

static

3

HWIDkey_Ch...1).exe

windows10-1703-x64

9

HWIDkey_Ch...1).exe

windows11-21h2-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    HWIDkey_Changer (1).exe

  • Size

    636KB

  • Sample

    240907-3ecv7a1dqr

  • MD5

    c20e96d4e616ce333c19a1c15a1cc137

  • SHA1

    f79645ec115130ee59958c55a556f564260b7a9e

  • SHA256

    2c141c06f7df57f11ef2c62f2a96093484a65df47065b1a475c53784af0e2664

  • SHA512

    519fec9955c4a18e45ec68d9e7dc2bcda74721a6ea088e59e634e26b136bfa15f5efedf8839c036a3cfdcdb9780a2121dc2d71f1fdbbfd3df02d9969e5db753b

  • SSDEEP

    12288:EN1TNRzUSWgDxPWnP0Lamg+hyMU1EUFT99qpDDcZDDR5Id1888888888888W888H:whNRASWgDxPWnP0LamWYC8EOd

Score
9/10
credential_accessdiscoverystealer

Malware Config

Targets

    • Target

      HWIDkey_Changer (1).exe

    • Size

      636KB

    • MD5

      c20e96d4e616ce333c19a1c15a1cc137

    • SHA1

      f79645ec115130ee59958c55a556f564260b7a9e

    • SHA256

      2c141c06f7df57f11ef2c62f2a96093484a65df47065b1a475c53784af0e2664

    • SHA512

      519fec9955c4a18e45ec68d9e7dc2bcda74721a6ea088e59e634e26b136bfa15f5efedf8839c036a3cfdcdb9780a2121dc2d71f1fdbbfd3df02d9969e5db753b

    • SSDEEP

      12288:EN1TNRzUSWgDxPWnP0Lamg+hyMU1EUFT99qpDDcZDDR5Id1888888888888W888H:whNRASWgDxPWnP0LamWYC8EOd

    Score
    9/10
    credential_accessdiscoverystealer

    • Credentials from Password Stores: Credentials from Web Browsers

      Malicious Access or copy of Web Browser Credential store.

      credential_accessstealer

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks