Overview

overview

7

Static

static

3

PO, and TT...SD.exe

windows10-2004-x64

7

PO, and TT...SD.exe

windows11-21h2-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    PO, and TT payment copy $89,970 USD.exe
  • Size 436KB
  • Sample260421-qzmjxaay91
  • SHA256 e8abba05c2e1138d664b3a0df4a2be932cc1d8a887b0fe9c45e185cd1ae9b179
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discoveryspywarestealer

Malware Config

Targets

    • Target
      PO, and TT payment copy $89,970 USD.exe
    • Size 436KB
    • SHA256 e8abba05c2e1138d664b3a0df4a2be932cc1d8a887b0fe9c45e185cd1ae9b179
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    discoveryspywarestealer

    • Reads WinSCP keys stored on the system

      Tries to access WinSCP stored sessions.

      spywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks