Overview

overview

10

Static

static

10

Found-Crypto-V2.0.exe

windows10-ltsc_2021-x64

10

Found-Crypto-V2.0.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Found-Crypto-V2.0.exe

  • Size

    19.2MB

  • Sample

    250322-29d63axjv6

  • MD5

    ee975199f978b3a8ba28f45267b67c7d

  • SHA1

    20c11128838a84f714fe861fabb4efed7760556b

  • SHA256

    ba4426aa503f405add2a842436447a472a77dd0a977d2edc9bd92e39f795e738

  • SHA512

    c83cbc39344399f47feb022675bc8a0b63a45b2549c1ae6c2944ccba9f122a9bdaba331a9100b8f4512ec1a943609b2233a10315380c5ca4e7c5dc4aaa035b13

  • SSDEEP

    393216:BdGdkkwbW+eGQRcMTozGxu8C0ibflYau5qW80hoA/aUPcHSpJbxs1EX6WkDW5:BdGyVW+e5RloztZ0b5qW80hVWCbiJLDy

Score
10/10
svcstealerdefense_evasiondiscoverydownloaderpersistencepyinstallerstealertrojan

Malware Config

Targets

    • Target

      Found-Crypto-V2.0.exe

    • Size

      19.2MB

    • MD5

      ee975199f978b3a8ba28f45267b67c7d

    • SHA1

      20c11128838a84f714fe861fabb4efed7760556b

    • SHA256

      ba4426aa503f405add2a842436447a472a77dd0a977d2edc9bd92e39f795e738

    • SHA512

      c83cbc39344399f47feb022675bc8a0b63a45b2549c1ae6c2944ccba9f122a9bdaba331a9100b8f4512ec1a943609b2233a10315380c5ca4e7c5dc4aaa035b13

    • SSDEEP

      393216:BdGdkkwbW+eGQRcMTozGxu8C0ibflYau5qW80hoA/aUPcHSpJbxs1EX6WkDW5:BdGyVW+e5RloztZ0b5qW80hVWCbiJLDy

    Score
    10/10
    svcstealerdefense_evasiondiscoverydownloaderpersistencepyinstallerstealertrojan

    • Detects SvcStealer Payload

      SvcStealer aka Diamotrix Clipper is a stealer/downloader written in C++.

    • SvcStealer, Diamotrix

      SvcStealer aka Diamotrix Clipper is a stealer/downloader written in C++.

      stealerdownloadersvcstealer

    • Svcstealer family

      svcstealer

    • Drops file in Drivers directory

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks whether UAC is enabled

      defense_evasiontrojan

    • Network Share Discovery

      Attempt to gather information on host network.

      discovery

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks