Overview

overview

10

Static

static

cfe38d9787...8e.exe

windows7-x64

10

cfe38d9787...8e.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    cfe38d97877912474e8e5976a5e3b5c3f6a6e07eace4286fc1da117c516f7a8e

  • Size

    275KB

  • Sample

    220919-b1jr3sahc7

  • MD5

    edfd7032ec75bfc12d48fe4f308e50bb

  • SHA1

    940b5154cdeba782919ad1dfeb743fcebef213df

  • SHA256

    cfe38d97877912474e8e5976a5e3b5c3f6a6e07eace4286fc1da117c516f7a8e

  • SHA512

    ab52ce3dc02b3d7175b9c22659e3e2edf1d4110da99526cc4e60794144c832a5257160db1fc1c8af7e3aacb8d3f5c0712a5e10150a3bf1b9d65a2e4e80ad8e3d

  • SSDEEP

    6144:Cp7IHOo+LPIsnAKUZQAdgUDYHf6XkAPTKl5ee:+hDrXBAdgdALeee

Score
10/10
adwarediscoverypersistencestealer

Malware Config

Targets

    • Target

      cfe38d97877912474e8e5976a5e3b5c3f6a6e07eace4286fc1da117c516f7a8e

    • Size

      275KB

    • MD5

      edfd7032ec75bfc12d48fe4f308e50bb

    • SHA1

      940b5154cdeba782919ad1dfeb743fcebef213df

    • SHA256

      cfe38d97877912474e8e5976a5e3b5c3f6a6e07eace4286fc1da117c516f7a8e

    • SHA512

      ab52ce3dc02b3d7175b9c22659e3e2edf1d4110da99526cc4e60794144c832a5257160db1fc1c8af7e3aacb8d3f5c0712a5e10150a3bf1b9d65a2e4e80ad8e3d

    • SSDEEP

      6144:Cp7IHOo+LPIsnAKUZQAdgUDYHf6XkAPTKl5ee:+hDrXBAdgdALeee

    Score
    10/10
    adwarediscoverypersistencestealer

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Modifies Installed Components in the registry

      persistence

    • Deletes itself

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks