Overview

overview

8

Static

static

1

730880284326.html

windows7-x64

8

Resubmissions

28/03/2025, 12:13

250328-pd732sv1bz 8

28/03/2025, 11:45

250328-nw5j7svyey 1

28/03/2025, 11:45

250328-nwzzqavyew 4

28/03/2025, 11:38

250328-nrxc2avycv 8

28/03/2025, 11:37

250328-nrmhtsxlt2 1

28/03/2025, 11:32

250328-nnq2vaxkz5 4

28/03/2025, 11:32

250328-nnkj3axkz4 1

28/03/2025, 11:32

250328-nnbl6axkz3 1

28/03/2025, 09:12

250328-k6mwcstye1 8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    730880284326

  • Size

    550B

  • Sample

    250328-nrxc2avycv

  • MD5

    60ee7118f7d5d6737e4577103711e257

  • SHA1

    df5d33bf26a9882e6e512e4803438031559cfca2

  • SHA256

    e1369268642ccda5e7b9faf8befc73e502ffddf79eda69d5189cac13a8557a63

  • SHA512

    3d4816c0e6b591fad2fdcc10a9b38ed0fb84fd62f7ad99e42e11f79e91b8776db7d0bf9eb2583bc89e0ee55e937e4dd1f39bd9f1dbc63058d104e37ec440e62a

Score
8/10
defense_evasiondiscoveryspywarestealertrojan

Malware Config

Targets

    • Target

      730880284326

    • Size

      550B

    • MD5

      60ee7118f7d5d6737e4577103711e257

    • SHA1

      df5d33bf26a9882e6e512e4803438031559cfca2

    • SHA256

      e1369268642ccda5e7b9faf8befc73e502ffddf79eda69d5189cac13a8557a63

    • SHA512

      3d4816c0e6b591fad2fdcc10a9b38ed0fb84fd62f7ad99e42e11f79e91b8776db7d0bf9eb2583bc89e0ee55e937e4dd1f39bd9f1dbc63058d104e37ec440e62a

    Score
    8/10
    defense_evasiondiscoveryspywarestealertrojan

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks whether UAC is enabled

      defense_evasiontrojan
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks