Overview

overview

8

Static

static

dxgi.dll

windows7_x64

8

dxgi.dll

windows10_x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    dxgi.dll
  • Size 688KB
  • Sample200626-7ks2vrf7tn
  • SHA256 5cd27e2b49870da39e71fdb5c7b858b1548f351aa16e14df939103c75aa8aefd
  • MD5 SHA1 SHA512
Score
8/10
evasionpersistencespywaretrojan

Malware Config

Targets

    • Target
      dxgi.dll
    • Size 688KB
    • SHA256 5cd27e2b49870da39e71fdb5c7b858b1548f351aa16e14df939103c75aa8aefd
    • MD5 SHA1 SHA512
    Score
    8/10
    evasiontrojanspywarepersistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spyware

    • Adds Run entry to start application

      persistence

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks