Overview

overview

8

Static

static

f46ff6ac83...d6.exe

windows7-x64

8

f46ff6ac83...d6.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    f46ff6ac83585dd736d0283de0bc0ddf4069f3587f7fef80bdcc5c554e6cb6d6

  • Size

    244KB

  • Sample

    221030-q4gjfsdag2

  • MD5

    931e61cbe41ed716eefc3ab3a103c919

  • SHA1

    2ea0389b4032b73a8ac8c75430ad2958cdc0dfdb

  • SHA256

    f46ff6ac83585dd736d0283de0bc0ddf4069f3587f7fef80bdcc5c554e6cb6d6

  • SHA512

    dca18e7a736a441541742c3e03db931e476768db1d9799f1ecaf6e25da7f0cd514f5391b680cd6b4d596d8003fe66c66db1f356b8dccd53c6804145315541b94

  • SSDEEP

    3072:hn1/uEAgDPdkBlyFZ+ScjaiKWbETBquAEXlqsUUbL5mTyUU2LpaB4t/s+2+/WpGE:h1OgDPdkBAFZWjadD4s5YBrLDt/srvpR

Score
8/10
adwarediscoveryspywarestealer

Malware Config

Targets

    • Target

      f46ff6ac83585dd736d0283de0bc0ddf4069f3587f7fef80bdcc5c554e6cb6d6

    • Size

      244KB

    • MD5

      931e61cbe41ed716eefc3ab3a103c919

    • SHA1

      2ea0389b4032b73a8ac8c75430ad2958cdc0dfdb

    • SHA256

      f46ff6ac83585dd736d0283de0bc0ddf4069f3587f7fef80bdcc5c554e6cb6d6

    • SHA512

      dca18e7a736a441541742c3e03db931e476768db1d9799f1ecaf6e25da7f0cd514f5391b680cd6b4d596d8003fe66c66db1f356b8dccd53c6804145315541b94

    • SSDEEP

      3072:hn1/uEAgDPdkBlyFZ+ScjaiKWbETBquAEXlqsUUbL5mTyUU2LpaB4t/s+2+/WpGE:h1OgDPdkBAFZWjadD4s5YBrLDt/srvpR

    Score
    8/10
    adwarediscoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks