Overview

overview

8

Static

static

eb4ac6df43...82.exe

windows7-x64

8

eb4ac6df43...82.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eb4ac6df43c243f068001eea68263007050e8b301b9aedf138011d050dc3f682

  • Size

    315KB

  • Sample

    221020-aalcjseafm

  • MD5

    a19cf93513fe44a551ac4abdb37ff5b5

  • SHA1

    737cecb197b4f1c5cafb1ce196d2f07b6bb8b38c

  • SHA256

    eb4ac6df43c243f068001eea68263007050e8b301b9aedf138011d050dc3f682

  • SHA512

    5a8700b7e6da84496de54bc97d0704bcb8529cc0a3504715efb41e997eaaa05ce42efff70abaf5802aa0fa68c3289f13e2b989d2e2ef34e7539d36951300bedc

  • SSDEEP

    6144:91OgDPdkBAFZWjadD4s2EasWNxpjbTQ7ol4duQR/M4yC:91OgLda9Ev83bMo+D

Score
8/10
adwarediscoveryspywarestealer

Malware Config

Targets

    • Target

      eb4ac6df43c243f068001eea68263007050e8b301b9aedf138011d050dc3f682

    • Size

      315KB

    • MD5

      a19cf93513fe44a551ac4abdb37ff5b5

    • SHA1

      737cecb197b4f1c5cafb1ce196d2f07b6bb8b38c

    • SHA256

      eb4ac6df43c243f068001eea68263007050e8b301b9aedf138011d050dc3f682

    • SHA512

      5a8700b7e6da84496de54bc97d0704bcb8529cc0a3504715efb41e997eaaa05ce42efff70abaf5802aa0fa68c3289f13e2b989d2e2ef34e7539d36951300bedc

    • SSDEEP

      6144:91OgDPdkBAFZWjadD4s2EasWNxpjbTQ7ol4duQR/M4yC:91OgLda9Ev83bMo+D

    Score
    8/10
    adwarediscoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks