Overview

overview

10

Static

static

Cherokee.dll

windows7_x64

1

Cherokee.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Cherokee

  • Size

    556KB

  • Sample

    201109-3yvth6t1fs

  • MD5

    51303064fdcc6f69898e9f20ed0dde74

  • SHA1

    456fead88c60451a31fc8b6345842a18c5b9fbc8

  • SHA256

    1963d310983cb5e188c7e293f1beb638d035a0abef3aea105885d280c0a65090

  • SHA512

    6f0cfd7c77a0b3f9f660465ffec4b928a14fa0e0e66a2d27f73592ee8f78ab73336f0173f4670a97abf39b83812ea9dddee5c332fb9ae28c09dd84cd9f8c161c

Score
10/10
ursnifbankertrojan

Malware Config

Targets

    • Target

      Cherokee

    • Size

      556KB

    • MD5

      51303064fdcc6f69898e9f20ed0dde74

    • SHA1

      456fead88c60451a31fc8b6345842a18c5b9fbc8

    • SHA256

      1963d310983cb5e188c7e293f1beb638d035a0abef3aea105885d280c0a65090

    • SHA512

      6f0cfd7c77a0b3f9f660465ffec4b928a14fa0e0e66a2d27f73592ee8f78ab73336f0173f4670a97abf39b83812ea9dddee5c332fb9ae28c09dd84cd9f8c161c

    Score
    10/10
    ursnifbankertrojan

    • Ursnif, Dreambot

      Ursnif is a variant of the Gozi IFSB with more capabilities.

      bankertrojanursnif
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks