Overview

overview

10

Static

static

3f2dd0bb49...8b.dll

windows7_x64

10

3f2dd0bb49...8b.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3f2dd0bb49b0e584c00ecd1c342d116856a4685b6d0cd4dfc864efe19679e88b

  • Size

    1.5MB

  • Sample

    201108-f58akhm1qs

  • MD5

    532a002f871ef5284a1d23c72abf2389

  • SHA1

    5b29aef3fb97935b4e873669ccfcdcc46320f7a8

  • SHA256

    3f2dd0bb49b0e584c00ecd1c342d116856a4685b6d0cd4dfc864efe19679e88b

  • SHA512

    3a8da72933bfbaaeab10af81112f9bcedbf5c89c40eb7f9691b62866f551bad5d5d7db38ee6046fd5b3f94937ed6331b9089995cd09b4c68f649bcc0f4ed736c

Score
10/10
adwarepersistencestealer

Malware Config

Targets

    • Target

      3f2dd0bb49b0e584c00ecd1c342d116856a4685b6d0cd4dfc864efe19679e88b

    • Size

      1.5MB

    • MD5

      532a002f871ef5284a1d23c72abf2389

    • SHA1

      5b29aef3fb97935b4e873669ccfcdcc46320f7a8

    • SHA256

      3f2dd0bb49b0e584c00ecd1c342d116856a4685b6d0cd4dfc864efe19679e88b

    • SHA512

      3a8da72933bfbaaeab10af81112f9bcedbf5c89c40eb7f9691b62866f551bad5d5d7db38ee6046fd5b3f94937ed6331b9089995cd09b4c68f649bcc0f4ed736c

    Score
    10/10
    adwarepersistencestealer

    • Registers COM server for autorun

      persistence

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Browser Extensions

1
T1176

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks