Overview

overview

10

Static

static

e33fdd9e48...63.exe

windows7-x64

10

e33fdd9e48...63.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e33fdd9e482472df3ab545ea9cc3e2cdbd8dfec5b12c7435651c41334f260663

  • Size

    500KB

  • Sample

    221020-n65b7acfdq

  • MD5

    741881a4decc4960fe7dcebac35e5050

  • SHA1

    b8fe46ea965c3e653611933f85db0c5a8e1f4e24

  • SHA256

    e33fdd9e482472df3ab545ea9cc3e2cdbd8dfec5b12c7435651c41334f260663

  • SHA512

    8c4d53e61d3622eb3c6ad252ca02b9ec9808f39e973746f771e096ac980050aee265e68645e3717d7075e8fd36d6c265f9d5156ae00bd9cefd736f7b57e236fe

  • SSDEEP

    12288:ZlWtZnNlB2e7EQXokRUCLxSftAd7U44Vn:Xq11hRokRwui1

Score
10/10
evasionpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      e33fdd9e482472df3ab545ea9cc3e2cdbd8dfec5b12c7435651c41334f260663

    • Size

      500KB

    • MD5

      741881a4decc4960fe7dcebac35e5050

    • SHA1

      b8fe46ea965c3e653611933f85db0c5a8e1f4e24

    • SHA256

      e33fdd9e482472df3ab545ea9cc3e2cdbd8dfec5b12c7435651c41334f260663

    • SHA512

      8c4d53e61d3622eb3c6ad252ca02b9ec9808f39e973746f771e096ac980050aee265e68645e3717d7075e8fd36d6c265f9d5156ae00bd9cefd736f7b57e236fe

    • SSDEEP

      12288:ZlWtZnNlB2e7EQXokRUCLxSftAd7U44Vn:Xq11hRokRwui1

    Score
    10/10
    evasionpersistencespywarestealertrojan

    • Modifies visibility of file extensions in Explorer

      evasion

    • UAC bypass

      evasiontrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks