Overview

overview

10

Static

static

10

c63d8f9f32...18.exe

windows10-2004-x64

10

c63d8f9f32...18.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    c63d8f9f32ca347f1c347f472a5a1e5da1c5228216e76aa486e7a71c63c42918
  • Size 431KB
  • Sample260122-sgwe7sex5d
  • SHA256 c63d8f9f32ca347f1c347f472a5a1e5da1c5228216e76aa486e7a71c63c42918
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
evelyn_stealerbrowserkitloaderstealer

Malware Config

Targets

    • Target
      c63d8f9f32ca347f1c347f472a5a1e5da1c5228216e76aa486e7a71c63c42918
    • Size 431KB
    • SHA256 c63d8f9f32ca347f1c347f472a5a1e5da1c5228216e76aa486e7a71c63c42918
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    browserkitevelyn_stealerloaderstealer

    • Detects Evelyn Stealer payload

    • EvelynStealer

      Evelyn is a stealer targeting software developers via malicious Visual Studio Code extensions.

      stealerloaderbrowserkitevelyn_stealer

    • Evelyn_stealer family

      evelyn_stealer

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks