Overview

overview

10

Static

static

10

Flasher.exe

windows7-x64

10

Flasher.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Flasher.exe

  • Size

    573KB

  • Sample

    250228-n7mhrsywb1

  • MD5

    eff931961e9134a9945fadd29df90ff7

  • SHA1

    cc27b1d909b14a01a88d27545007703aa9c82d36

  • SHA256

    f126cbaecfd33f8026cf15a223857503f147b947dccb7a5da727ea19a4a5963b

  • SHA512

    5a5bdd3458b64ff434598dd09c98d2ef31945288560d2995ec6200ed0894a71e2522d5ffbdb23f9fcd59159bb811983b0c2862b688cff5fc7fbb50e9a113f290

  • SSDEEP

    12288:ntuH9xWLgvHIh+bOH1JcyDXFJgazKHWs88/vNKI8e:nto9xWLgvHI+OHPcy7T7zBs88/vgZe

Score
10/10
svcstealerdownloaderpersistencestealer

Malware Config

Targets

    • Target

      Flasher.exe

    • Size

      573KB

    • MD5

      eff931961e9134a9945fadd29df90ff7

    • SHA1

      cc27b1d909b14a01a88d27545007703aa9c82d36

    • SHA256

      f126cbaecfd33f8026cf15a223857503f147b947dccb7a5da727ea19a4a5963b

    • SHA512

      5a5bdd3458b64ff434598dd09c98d2ef31945288560d2995ec6200ed0894a71e2522d5ffbdb23f9fcd59159bb811983b0c2862b688cff5fc7fbb50e9a113f290

    • SSDEEP

      12288:ntuH9xWLgvHIh+bOH1JcyDXFJgazKHWs88/vNKI8e:nto9xWLgvHI+OHPcy7T7zBs88/vgZe

    Score
    10/10
    svcstealerdownloaderpersistencestealer

    • Detects SvcStealer Payload

      SvcStealer aka Diamotrix Clipper is a stealer/downloader written in C++.

    • SvcStealer, Diamotrix

      SvcStealer aka Diamotrix Clipper is a stealer/downloader written in C++.

      stealerdownloadersvcstealer

    • Svcstealer family

      svcstealer

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks