Overview

overview

9

Static

static

3

02afb24ff4...0N.exe

windows7-x64

9

02afb24ff4...0N.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    02afb24ff4daaa9dcdff56a0f6eabd10N

  • Size

    2.6MB

  • Sample

    240908-aev3jsvgre

  • MD5

    02afb24ff4daaa9dcdff56a0f6eabd10

  • SHA1

    47d51b98186d0403e1087a24b1d56edc4f87e009

  • SHA256

    ce77de23b4e678db5341f59ff4c861138157fcdc519dd4417f884f74d7285e34

  • SHA512

    edaf46813153849b751be88bacbf9b65b428763546466bc6e618fe4832bfebf2c9e9afe3b98bc301e2e1133538f137ef6c23d5ade6520e37462fdc53c1afa2ca

  • SSDEEP

    49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LB9B/bS:sxX7QnxrloE5dpUpmb

Score
9/10
credential_accessdiscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      02afb24ff4daaa9dcdff56a0f6eabd10N

    • Size

      2.6MB

    • MD5

      02afb24ff4daaa9dcdff56a0f6eabd10

    • SHA1

      47d51b98186d0403e1087a24b1d56edc4f87e009

    • SHA256

      ce77de23b4e678db5341f59ff4c861138157fcdc519dd4417f884f74d7285e34

    • SHA512

      edaf46813153849b751be88bacbf9b65b428763546466bc6e618fe4832bfebf2c9e9afe3b98bc301e2e1133538f137ef6c23d5ade6520e37462fdc53c1afa2ca

    • SSDEEP

      49152:sxX7665YxRVplZzSKntlGIiT+HvRdpcAHSjpjK3LB9B/bS:sxX7QnxrloE5dpUpmb

    Score
    9/10
    credential_accessdiscoverypersistencespywarestealer

    • Credentials from Password Stores: Credentials from Web Browsers

      Malicious Access or copy of Web Browser Credential store.

      credential_accessstealer

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks