Overview

overview

7

Static

static

3

81dcae6d17...39.exe

windows7-x64

7

81dcae6d17...39.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    81dcae6d17554aa7f3b1839cc2d3b7d038db043be1ed53ae64b29a440e0fac39.exe

  • Size

    1.6MB

  • Sample

    241120-ehtq4szerb

  • MD5

    1d1c360802dcda96eb50ead3c2affae5

  • SHA1

    05c3acebd2e5efbc17dc245524cb1647c9923de5

  • SHA256

    81dcae6d17554aa7f3b1839cc2d3b7d038db043be1ed53ae64b29a440e0fac39

  • SHA512

    391d84e686dad590e89b252aa6179f99fbad7179206821db426162f888edb9b1e824c5ad03c7414818bd23618eda714e697b952961c538fb04eafb45e05dcf37

  • SSDEEP

    24576:r+XDx8NDFKYmKOF0zr31JwAlcR3QC0OXxc0HS:ragDUYmvFur31yAipQCtXxc0HS

Score
7/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      81dcae6d17554aa7f3b1839cc2d3b7d038db043be1ed53ae64b29a440e0fac39.exe

    • Size

      1.6MB

    • MD5

      1d1c360802dcda96eb50ead3c2affae5

    • SHA1

      05c3acebd2e5efbc17dc245524cb1647c9923de5

    • SHA256

      81dcae6d17554aa7f3b1839cc2d3b7d038db043be1ed53ae64b29a440e0fac39

    • SHA512

      391d84e686dad590e89b252aa6179f99fbad7179206821db426162f888edb9b1e824c5ad03c7414818bd23618eda714e697b952961c538fb04eafb45e05dcf37

    • SSDEEP

      24576:r+XDx8NDFKYmKOF0zr31JwAlcR3QC0OXxc0HS:ragDUYmvFur31yAipQCtXxc0HS

    Score
    7/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks