Overview

overview

10

Static

static

3

f6dbf9ef53...95.exe

windows10-2004-x64

10

f6dbf9ef53...95.exe

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    f6dbf9ef53dc7851a037f2e3b80c78aed19eb32dd9aa8fd81e9f3ba0a30ae095
  • Size 1.3MB
  • Sample260212-rqfknset4g
  • SHA256 f6dbf9ef53dc7851a037f2e3b80c78aed19eb32dd9aa8fd81e9f3ba0a30ae095
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
passcathacktoolpersistence

Malware Config

Targets

    • Target
      f6dbf9ef53dc7851a037f2e3b80c78aed19eb32dd9aa8fd81e9f3ba0a30ae095
    • Size 1.3MB
    • SHA256 f6dbf9ef53dc7851a037f2e3b80c78aed19eb32dd9aa8fd81e9f3ba0a30ae095
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    passcathacktoolpersistence

    • Detects PassCat password recovery tool

    • PassCat

      PassCat is an open-source post-exploitation tool for stealing passwords.

      hacktoolpasscat

    • Passcat family

      passcat

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks