Overview

overview

7

Static

static

new order ...de.exe

windows7_x64

7

new order ...de.exe

windows10_x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    new order B230421A0351 BW30271029111 PO#3111 Q0321002201472-Global Trade.exe
  • Size 859KB
  • Sample220114-n48ltsgcbr
  • SHA256 4c0f83c722bdcb38b3d53a1cebc80b777ee6e02742e27a384ac39d7e51f4e7dd
  • MD5 SHA1 SHA512
Score
7/10
collectionpersistencespywarestealer

Malware Config

Targets

    • Target
      new order B230421A0351 BW30271029111 PO#3111 Q0321002201472-Global Trade.exe
    • Size 859KB
    • SHA256 4c0f83c722bdcb38b3d53a1cebc80b777ee6e02742e27a384ac39d7e51f4e7dd
    • MD5 SHA1 SHA512
    Score
    7/10
    collectionpersistencespywarestealer

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Accesses Microsoft Outlook profiles

      collection

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks