Overview

overview

10

Static

static

ca4f144145...6a.dll

windows7_x64

10

ca4f144145...6a.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ca4f144145fc04027a738383ca85eac08d3174d53a1644ec7eb0091f77ead76a

  • Size

    218KB

  • Sample

    220122-a67wesgaap

  • MD5

    01965209272dccee598bef783dd6ff81

  • SHA1

    bcbc28219d47097fbce312da450b84079689a0bf

  • SHA256

    ca4f144145fc04027a738383ca85eac08d3174d53a1644ec7eb0091f77ead76a

  • SHA512

    9bd5ade6eb3eb3e1eaf73e31269ab6ee63e49190ae16fb539b27fba3e24f9f58f3678448f4922711106444e26f28f8773a903f2b96be63206a632519950252ef

Score
10/10
adwarepersistencestealer

Malware Config

Targets

    • Target

      ca4f144145fc04027a738383ca85eac08d3174d53a1644ec7eb0091f77ead76a

    • Size

      218KB

    • MD5

      01965209272dccee598bef783dd6ff81

    • SHA1

      bcbc28219d47097fbce312da450b84079689a0bf

    • SHA256

      ca4f144145fc04027a738383ca85eac08d3174d53a1644ec7eb0091f77ead76a

    • SHA512

      9bd5ade6eb3eb3e1eaf73e31269ab6ee63e49190ae16fb539b27fba3e24f9f58f3678448f4922711106444e26f28f8773a903f2b96be63206a632519950252ef

    Score
    10/10
    adwarepersistencestealer

    • Registers COM server for autorun

      persistence

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Browser Extensions

1
T1176

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks