Overview

overview

8

Static

static

572fa6d58d...3c.exe

windows7-x64

8

572fa6d58d...3c.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    572fa6d58d106b440026e0341e060453ee5ac37e9473660f8164bb1f4d95c13c

  • Size

    313KB

  • Sample

    221011-kl9jmaegdj

  • MD5

    7b4023faf5763923d255004da819a742

  • SHA1

    91523ee535ef069839213fd031ec432141bcb48b

  • SHA256

    572fa6d58d106b440026e0341e060453ee5ac37e9473660f8164bb1f4d95c13c

  • SHA512

    6300de5da1ee01835828dc43bf5e6972187e7e34e4f4b489bd825d4753a17950133f2516b9106fb5ab14d88b741a3fb8c6fe34ca4399adc5f0d1971170f6bfa5

  • SSDEEP

    6144:91OgDPdkBAFZWjadD4skkhZM6/HXSEtCSiAACf64e9PSidwE+AkQsTxH7IHqd:91OgLdaAh+6/HC0i/b9t+EVkHTxH7IKd

Score
8/10
adwarediscoveryspywarestealer

Malware Config

Targets

    • Target

      572fa6d58d106b440026e0341e060453ee5ac37e9473660f8164bb1f4d95c13c

    • Size

      313KB

    • MD5

      7b4023faf5763923d255004da819a742

    • SHA1

      91523ee535ef069839213fd031ec432141bcb48b

    • SHA256

      572fa6d58d106b440026e0341e060453ee5ac37e9473660f8164bb1f4d95c13c

    • SHA512

      6300de5da1ee01835828dc43bf5e6972187e7e34e4f4b489bd825d4753a17950133f2516b9106fb5ab14d88b741a3fb8c6fe34ca4399adc5f0d1971170f6bfa5

    • SSDEEP

      6144:91OgDPdkBAFZWjadD4skkhZM6/HXSEtCSiAACf64e9PSidwE+AkQsTxH7IHqd:91OgLdaAh+6/HC0i/b9t+EVkHTxH7IKd

    Score
    8/10
    adwarediscoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks