Overview

overview

8

Static

static

5999187654...5e.exe

windows7_x64

8

5999187654...5e.exe

windows10_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5999187654ca53d596fa2b82010badf37584474d15b6ed176f14e330a1b9b25e

  • Size

    88KB

  • Sample

    210518-4gzr611p1j

  • MD5

    107a2fefad98ccbfe9e90b7d673af869

  • SHA1

    119484ee7a5a361cfb9de2542c044135a4cc33ca

  • SHA256

    5999187654ca53d596fa2b82010badf37584474d15b6ed176f14e330a1b9b25e

  • SHA512

    59c6b106197d8c6a928422806e5dd921f1ac82fd033ccaccf7974e5b13ecebb34d37e4a130a8ab70fcd9730421121c31c23df60765f1ca97286f6f260129b7aa

Score
8/10
adwareevasionstealertrojan

Malware Config

Targets

    • Target

      5999187654ca53d596fa2b82010badf37584474d15b6ed176f14e330a1b9b25e

    • Size

      88KB

    • MD5

      107a2fefad98ccbfe9e90b7d673af869

    • SHA1

      119484ee7a5a361cfb9de2542c044135a4cc33ca

    • SHA256

      5999187654ca53d596fa2b82010badf37584474d15b6ed176f14e330a1b9b25e

    • SHA512

      59c6b106197d8c6a928422806e5dd921f1ac82fd033ccaccf7974e5b13ecebb34d37e4a130a8ab70fcd9730421121c31c23df60765f1ca97286f6f260129b7aa

    Score
    8/10
    adwareevasionstealertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks whether UAC is enabled

      evasiontrojan

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Browser Extensions

1
T1176

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks