Overview

overview

10

Static

static

8

fb8453fc73...6d.exe

windows7_x64

10

fb8453fc73...6d.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fb8453fc73a92294738c55c89ce235d18801355395a1bdab505bf2f2baab826d

  • Size

    412KB

  • Sample

    210517-jf7qgnac4s

  • MD5

    777a06f6d472224d3b310371808474e2

  • SHA1

    0fd45a96189db961585f78ad00c71bde7472fa4b

  • SHA256

    fb8453fc73a92294738c55c89ce235d18801355395a1bdab505bf2f2baab826d

  • SHA512

    cc7a67e236f97bfc40d186b3d2647b6ebe4814509cc372fbcf5a1df7a2a8d003fbe73d0d3abe967ff45bac5e7ca7750967e581b12a6ef7e07451def87f1c46b3

Score
10/10
adwarepersistencestealerupx

Malware Config

Targets

    • Target

      fb8453fc73a92294738c55c89ce235d18801355395a1bdab505bf2f2baab826d

    • Size

      412KB

    • MD5

      777a06f6d472224d3b310371808474e2

    • SHA1

      0fd45a96189db961585f78ad00c71bde7472fa4b

    • SHA256

      fb8453fc73a92294738c55c89ce235d18801355395a1bdab505bf2f2baab826d

    • SHA512

      cc7a67e236f97bfc40d186b3d2647b6ebe4814509cc372fbcf5a1df7a2a8d003fbe73d0d3abe967ff45bac5e7ca7750967e581b12a6ef7e07451def87f1c46b3

    Score
    10/10
    adwarepersistencestealer

    • Modifies WinLogon for persistence

      persistence

    • Modifies system executable filetype association

      persistence

    • Drops file in Drivers directory

    • Sets service image path in registry

      persistence

    • Adds Run key to start application

      persistence

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Modifies WinLogon

      persistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

2
T1004

Change Default File Association

1
T1042

Registry Run Keys / Startup Folder

2
T1060

Browser Extensions

1
T1176

Privilege Escalation

Defense Evasion

Modify Registry

6
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks