Overview

overview

8

Static

static

e8b86539ff...2b.exe

windows7-x64

8

e8b86539ff...2b.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    e8b86539ff9f30b5d58f65376518b527ef0f024c702a73ca8aef2d778468c72b

  • Size

    245KB

  • Sample

    221020-ld4tvafef9

  • MD5

    4c2fb8b68ea14e97c9c99fd0925fb13a

  • SHA1

    266b627fc3b0766f75a2f92c2308031f68a47f31

  • SHA256

    e8b86539ff9f30b5d58f65376518b527ef0f024c702a73ca8aef2d778468c72b

  • SHA512

    c126ab63722d1e38fa423de6d29b2dbe3983dda6fa26ad69f5d1f8f5917de1cd570238b111e7ab426550f6b353e56ce2d16235264745ff4b618861f62df588c1

  • SSDEEP

    6144:h1OgDPdkBAFZWjadD4s5lGnO3m6AAXHyUFVNGl:h1OgLdaOFjAAXHpVNGl

Score
8/10
adwarediscoveryspywarestealer

Malware Config

Targets

    • Target

      e8b86539ff9f30b5d58f65376518b527ef0f024c702a73ca8aef2d778468c72b

    • Size

      245KB

    • MD5

      4c2fb8b68ea14e97c9c99fd0925fb13a

    • SHA1

      266b627fc3b0766f75a2f92c2308031f68a47f31

    • SHA256

      e8b86539ff9f30b5d58f65376518b527ef0f024c702a73ca8aef2d778468c72b

    • SHA512

      c126ab63722d1e38fa423de6d29b2dbe3983dda6fa26ad69f5d1f8f5917de1cd570238b111e7ab426550f6b353e56ce2d16235264745ff4b618861f62df588c1

    • SSDEEP

      6144:h1OgDPdkBAFZWjadD4s5lGnO3m6AAXHyUFVNGl:h1OgLdaOFjAAXHpVNGl

    Score
    8/10
    adwarediscoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks