Overview

overview

8

Static

static

8

e6bd3c80fb...ir.exe

windows10_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e6bd3c80fbe81bbddd0ce095c4efa2ed.exe.vir

  • Size

    2.3MB

  • Sample

    211215-e5yctaggb6

  • MD5

    e6bd3c80fbe81bbddd0ce095c4efa2ed

  • SHA1

    5701bf12ad277b42bd951adfc3e57c5d6c4f8b64

  • SHA256

    c28a377d9093de3473e14a1a0ce0cb51d3d46b357872ca84a0625697f7f06a72

  • SHA512

    6a2d615af205c828992f76f27e0f7bf8a743bbfe1f91853b3fe9d034470c2c00d43591ad44112f41e599704e85c98fc2f11bc35d4dbec668b1d1d63dca1548a8

Score
8/10
adwareevasionpersistencespywarestealertrojanupx

Malware Config

Targets

    • Target

      e6bd3c80fbe81bbddd0ce095c4efa2ed.exe.vir

    • Size

      2.3MB

    • MD5

      e6bd3c80fbe81bbddd0ce095c4efa2ed

    • SHA1

      5701bf12ad277b42bd951adfc3e57c5d6c4f8b64

    • SHA256

      c28a377d9093de3473e14a1a0ce0cb51d3d46b357872ca84a0625697f7f06a72

    • SHA512

      6a2d615af205c828992f76f27e0f7bf8a743bbfe1f91853b3fe9d034470c2c00d43591ad44112f41e599704e85c98fc2f11bc35d4dbec668b1d1d63dca1548a8

    Score
    8/10
    adwareevasionpersistencespywarestealertrojan

    • Executes dropped EXE

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Checks whether UAC is enabled

      evasiontrojan

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Browser Extensions

1
T1176

Privilege Escalation

Defense Evasion

Modify Registry

3
T1112

Credential Access

Credentials in Files

1
T1081

Discovery

System Information Discovery

3
T1082

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks