Overview

overview

8

Static

static

3

a422d7ce71...7a.exe

windows7-x64

8

a422d7ce71...7a.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a422d7ce718dccf9364d5b5946d4cbf5d72ee3b6c4d765d76b2bff9494768e7a

  • Size

    398KB

  • Sample

    240929-afwqgavejg

  • MD5

    317055a164a4ab1c21e5d9b4ec532545

  • SHA1

    d22c614483b4d4597150bbd53b187f60296c2e8f

  • SHA256

    a422d7ce718dccf9364d5b5946d4cbf5d72ee3b6c4d765d76b2bff9494768e7a

  • SHA512

    134718a75930fa42dcf857f5d1ed95576202c6b4058c2d101f40ea4918f00acc1862858134fe1fb696e76337ae4d9a593ad64c4964094d18fac83e30f53f26a3

  • SSDEEP

    6144:L46tGdye41inDXYQ/BWJjmpgtBZQZKQj8p3jyb7HREd4SZ1tzLbF:L3NbADXYJmSTZwYp32bY4qtDF

Score
8/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      a422d7ce718dccf9364d5b5946d4cbf5d72ee3b6c4d765d76b2bff9494768e7a

    • Size

      398KB

    • MD5

      317055a164a4ab1c21e5d9b4ec532545

    • SHA1

      d22c614483b4d4597150bbd53b187f60296c2e8f

    • SHA256

      a422d7ce718dccf9364d5b5946d4cbf5d72ee3b6c4d765d76b2bff9494768e7a

    • SHA512

      134718a75930fa42dcf857f5d1ed95576202c6b4058c2d101f40ea4918f00acc1862858134fe1fb696e76337ae4d9a593ad64c4964094d18fac83e30f53f26a3

    • SSDEEP

      6144:L46tGdye41inDXYQ/BWJjmpgtBZQZKQj8p3jyb7HREd4SZ1tzLbF:L3NbADXYJmSTZwYp32bY4qtDF

    Score
    8/10
    discoveryspywarestealer

    • Drops file in Drivers directory

    • Deletes itself

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks