Overview

overview

7

Static

static

3

main.exe

windows11-21h2-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    main.exe

  • Size

    12.4MB

  • Sample

    240929-jtyxesvgkr

  • MD5

    9cf9cfabe8fc31171c6a5c2975a0a7ff

  • SHA1

    49952dc5e67423fa3a657de5913e0cae7c20d86b

  • SHA256

    7e93f70c5d575129af4892cfaae4f5a9790b20bd3fcdd97d002e53b8c2f3e496

  • SHA512

    4489fd3b257a7caf519477a84c30d3487d368c789dfdeb159e0890975b44fd7f4aac7fd36a2d54418c0fa88a7a0b1c97a042edfc8426de0e75b28cd68648e154

  • SSDEEP

    196608:/ppcuowuLI+lA1HeT39Iigwo1ncKOVVtaSE37RNj2tkc7tQTNajlTe0E5vxTIFxX:HcAeu1+TtIiFE0V7Cj9m6cjM0E5ILD

Score
7/10
pyinstallerspywarestealer

Malware Config

Targets

    • Target

      main.exe

    • Size

      12.4MB

    • MD5

      9cf9cfabe8fc31171c6a5c2975a0a7ff

    • SHA1

      49952dc5e67423fa3a657de5913e0cae7c20d86b

    • SHA256

      7e93f70c5d575129af4892cfaae4f5a9790b20bd3fcdd97d002e53b8c2f3e496

    • SHA512

      4489fd3b257a7caf519477a84c30d3487d368c789dfdeb159e0890975b44fd7f4aac7fd36a2d54418c0fa88a7a0b1c97a042edfc8426de0e75b28cd68648e154

    • SSDEEP

      196608:/ppcuowuLI+lA1HeT39Iigwo1ncKOVVtaSE37RNj2tkc7tQTNajlTe0E5vxTIFxX:HcAeu1+TtIiFE0V7Cj9m6cjM0E5ILD

    Score
    7/10
    spywarestealer

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks