Overview

overview

10

Static

static

10

DoxerV7.exe

windows7-x64

7

DoxerV7.exe

windows10-2004-x64

7

Resubmissions

13-01-2025 20:53

250113-zn91hazlfj 10

13-01-2025 12:53

250113-p4sq2ssnfx 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    doxerV7.rar

  • Size

    19.4MB

  • Sample

    250113-p4sq2ssnfx

  • MD5

    d329a5954b46c1a95e7ba11ad4ff571c

  • SHA1

    4e049a41a57dbb62db4c3e065b6b97fa9d1e03c6

  • SHA256

    6ba0f267bcb23a558c5bcdcdbe76255a78e2259df933220849cbe6cef9f856dd

  • SHA512

    338776ecbbb984e295956ab23adf9d2b01206f1208f25a2df5c1b632d62878710b7bd7ad1ff392db78a50b545f7d606d39454ad8fca0ebcd0c8bd21a07b035e6

  • SSDEEP

    393216:s3pvopOhTYOVNl6P2hdsMPxsb16L8i946J8afFpw2R5jWOZeVS4dxDM/ZeRDEz:s37YOVNl6PuOM01Z6ea9pw2RkOZoSyR4

Score
10/10
empyreandiscoverypersistenceprivilege_escalationpyinstallerspywarestealer

Malware Config

Targets

    • Target

      DoxerV7.exe

    • Size

      19.6MB

    • MD5

      9cd3c54cd577301cc4bfa6793e23563f

    • SHA1

      064231143d1bb4a793a348d79a3ca2d300bfb417

    • SHA256

      28bd3dc04da389e62f5dc987c5f11d70446d20eb270affc42f212972233a60ab

    • SHA512

      bdc4a5a13d9e17d1d637a9af1bb5a15ccd03e2f31b9915017cadce7e151bc54f388c320e45e46fd5b6b69517ac7abf3262ff455fa2aa4b3d609c348b0b93a93b

    • SSDEEP

      393216:Su7L/1a/vUI/5DfDg8Qzc65FMMBgCqEJ6Zj+dCDMOAql:SCLdad5b08QwwMMBS5NAkb

    Score
    7/10
    discoverypersistenceprivilege_escalationspywarestealer

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Legitimate hosting services abused for malware hosting/C2

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks