Overview

overview

8

Static

static

9697f31170...61.exe

windows7-x64

8

9697f31170...61.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    9697f3117024f3dcb33370ace0faabd3524400435fcca75ebcd60fda074af061

  • Size

    178KB

  • Sample

    220919-e51syagbf3

  • MD5

    3de3109d7e921d20aa0ac63bdb4f765d

  • SHA1

    b62de8506f7359e57b1c2abb7e9c719775a6cc08

  • SHA256

    9697f3117024f3dcb33370ace0faabd3524400435fcca75ebcd60fda074af061

  • SHA512

    154d7dbbd7651c1dd07be7e1c5e91ba4ca799f5dd7c35e4c4b5163678ef4b8f704cc583cd98d8549527c7705e61bcd32d73555d81be034458e141c19921cdcb6

  • SSDEEP

    3072:72fTkBHgMvyyEH17Ve6S4Pavq0+f1a2mD2b8j4lf+7bAMDFZubmq9cVf:7CIBHgM6T17Ve6S4PP0+fUNDOjMXPDqo

Score
8/10
adwarepersistencestealer

Malware Config

Targets

    • Target

      9697f3117024f3dcb33370ace0faabd3524400435fcca75ebcd60fda074af061

    • Size

      178KB

    • MD5

      3de3109d7e921d20aa0ac63bdb4f765d

    • SHA1

      b62de8506f7359e57b1c2abb7e9c719775a6cc08

    • SHA256

      9697f3117024f3dcb33370ace0faabd3524400435fcca75ebcd60fda074af061

    • SHA512

      154d7dbbd7651c1dd07be7e1c5e91ba4ca799f5dd7c35e4c4b5163678ef4b8f704cc583cd98d8549527c7705e61bcd32d73555d81be034458e141c19921cdcb6

    • SSDEEP

      3072:72fTkBHgMvyyEH17Ve6S4Pavq0+f1a2mD2b8j4lf+7bAMDFZubmq9cVf:7CIBHgM6T17Ve6S4PP0+fUNDOjMXPDqo

    Score
    8/10
    adwarepersistencestealer

    • Sets file execution options in registry

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks