Overview

overview

7

Static

static

3

7cb85cb6ed...df.exe

windows7-x64

7

7cb85cb6ed...df.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    7cb85cb6ed9c630aedf0fbf25f989e079756d027e1d1a73494a63b7f099614df

  • Size

    1.3MB

  • Sample

    240921-pmspqasapf

  • MD5

    ba81db4d279b2cb88a482b26be6094db

  • SHA1

    394d21b6907d35c2ac316945706e3080f6cd9aa2

  • SHA256

    7cb85cb6ed9c630aedf0fbf25f989e079756d027e1d1a73494a63b7f099614df

  • SHA512

    296b1a9dd6b496d7f18294103aad5fe05cfe2cd9bc0a2b0a41bf5c1ee3ca8fd2368fe1c500f056733223d82b2ccc1ed3a0d5130c648da79897c0df990eb0009b

  • SSDEEP

    24576:dIXgCWSpRyidSJVDsVu5unzqWvX18ETuffqmZEt9C8IGW7dDRF1Kl/7pK6QJJcgQ:MWSj5SJlsQuzqW/15TuqUEtlIVDR7Kly

Score
7/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      7cb85cb6ed9c630aedf0fbf25f989e079756d027e1d1a73494a63b7f099614df

    • Size

      1.3MB

    • MD5

      ba81db4d279b2cb88a482b26be6094db

    • SHA1

      394d21b6907d35c2ac316945706e3080f6cd9aa2

    • SHA256

      7cb85cb6ed9c630aedf0fbf25f989e079756d027e1d1a73494a63b7f099614df

    • SHA512

      296b1a9dd6b496d7f18294103aad5fe05cfe2cd9bc0a2b0a41bf5c1ee3ca8fd2368fe1c500f056733223d82b2ccc1ed3a0d5130c648da79897c0df990eb0009b

    • SSDEEP

      24576:dIXgCWSpRyidSJVDsVu5unzqWvX18ETuffqmZEt9C8IGW7dDRF1Kl/7pK6QJJcgQ:MWSj5SJlsQuzqW/15TuqUEtlIVDR7Kly

    Score
    7/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks