Overview

overview

8

Static

static

05AB720BBE...FF.exe

windows7_x64

8

05AB720BBE...FF.exe

windows10_x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    05AB720BBE85744CF1CBDAB2AA91BCFF.exe
  • Size 963KB
  • Sample210716-cqd28dc2v2
  • SHA256 c2365436a67ec76dc90b2f6d4fdf55ff9066d166754c5bc9ff7d5a6901f81aa4
  • MD5 SHA1 SHA512
Score
8/10
spywarestealervmprotect

Malware Config

Targets

    • Target
      05AB720BBE85744CF1CBDAB2AA91BCFF.exe
    • Size 963KB
    • SHA256 c2365436a67ec76dc90b2f6d4fdf55ff9066d166754c5bc9ff7d5a6901f81aa4
    • MD5 SHA1 SHA512
    Score
    8/10
    spywarestealervmprotect

    • Executes dropped EXE

    • VMProtect packed file

      Detects executables packed with VMProtect commercial packer.

      vmprotect

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks