Overview

overview

9

Static

static

3

66dd9b20d75ea_otr.exe

windows7-x64

9

66dd9b20d75ea_otr.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    66dd9b20d75ea_otr.exe

  • Size

    430KB

  • Sample

    240908-3cn6fazhlq

  • MD5

    805c6dfa454dc8a5538514cc30608f17

  • SHA1

    3249d8eabf974bd1508cccbdb1d8e7d60270db73

  • SHA256

    a9bf49d95c4e6d3c9e33e5de82a721ef8f02790daba204d9816b1d581a46b345

  • SHA512

    2183fda296fc7386ec5b021caa591a1d1cb30dd34ea84c86a9a4887185b0ad70d850c45adc634ce514695075942e723576207293374416b3561633b430739418

  • SSDEEP

    12288:vLOPetcpRK87nAPHIlr55kv5ScHSUQmXpCH0S4Mb:vLSpY8ryIlNEUUS4o

Score
9/10
credential_accessdiscoveryspywarestealer

Malware Config

Targets

    • Target

      66dd9b20d75ea_otr.exe

    • Size

      430KB

    • MD5

      805c6dfa454dc8a5538514cc30608f17

    • SHA1

      3249d8eabf974bd1508cccbdb1d8e7d60270db73

    • SHA256

      a9bf49d95c4e6d3c9e33e5de82a721ef8f02790daba204d9816b1d581a46b345

    • SHA512

      2183fda296fc7386ec5b021caa591a1d1cb30dd34ea84c86a9a4887185b0ad70d850c45adc634ce514695075942e723576207293374416b3561633b430739418

    • SSDEEP

      12288:vLOPetcpRK87nAPHIlr55kv5ScHSUQmXpCH0S4Mb:vLSpY8ryIlNEUUS4o

    Score
    9/10
    credential_accessdiscoveryspywarestealer

    • Credentials from Password Stores: Credentials from Web Browsers

      Malicious Access or copy of Web Browser Credential store.

      credential_accessstealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks