Overview

overview

8

Static

static

2c205179db...e6.exe

windows7-x64

8

2c205179db...e6.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    2c205179db4fbec88c7152f0561636825ba8b160757a4270129eba168e1cbbe6

  • Size

    313KB

  • Sample

    221029-29qj4abhem

  • MD5

    848f349583ee2da031fa97fbb9d8c851

  • SHA1

    95f57aa577d71d7084f922d072364e65a38e200c

  • SHA256

    2c205179db4fbec88c7152f0561636825ba8b160757a4270129eba168e1cbbe6

  • SHA512

    dfa53f026ebef8cd2a5896175ee7d211b281bc95933dae367f16bfde7e7f8bf36420031f204924673416b8097347739fa06df87aa56fae57502d0f66771e3d94

  • SSDEEP

    6144:91OgDPdkBAFZWjadD4sZo8vZRvR3za/VVqQUdBTxGKoY6mL1Et4sN:91OgLdaSja/LPWGKo+1Et1

Score
8/10
adwarediscoveryspywarestealer

Malware Config

Targets

    • Target

      2c205179db4fbec88c7152f0561636825ba8b160757a4270129eba168e1cbbe6

    • Size

      313KB

    • MD5

      848f349583ee2da031fa97fbb9d8c851

    • SHA1

      95f57aa577d71d7084f922d072364e65a38e200c

    • SHA256

      2c205179db4fbec88c7152f0561636825ba8b160757a4270129eba168e1cbbe6

    • SHA512

      dfa53f026ebef8cd2a5896175ee7d211b281bc95933dae367f16bfde7e7f8bf36420031f204924673416b8097347739fa06df87aa56fae57502d0f66771e3d94

    • SSDEEP

      6144:91OgDPdkBAFZWjadD4sZo8vZRvR3za/VVqQUdBTxGKoY6mL1Et4sN:91OgLdaSja/LPWGKo+1Et1

    Score
    8/10
    adwarediscoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks