Overview

overview

8

Static

static

4e04cec2f2...76.exe

windows7-x64

8

4e04cec2f2...76.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    4e04cec2f2b9b6320b9978693b973cb2905fddb8fdf86f45fb11c360e30dae76

  • Size

    204KB

  • Sample

    221107-qe4yfshaa3

  • MD5

    0cf17a776f951d6993c5adc9a0bcf186

  • SHA1

    6a11aa3f62c19fa61812b684533457ef62af4231

  • SHA256

    4e04cec2f2b9b6320b9978693b973cb2905fddb8fdf86f45fb11c360e30dae76

  • SHA512

    4b4677631a1b45a79038b8901adc69e07fc3c539c1aaf313e0df331608d3d5a41667c1ebb8b584a19f2ee10282ef5dabcb837bc82c2a2787b1a100681f4d52d6

  • SSDEEP

    3072:+PSBxK5PidCBrz5tdr/lOe1+zq979pMsTN7f60DPPsiNdkyZ8nbJFvCZ:PAlKCBvZlONCN7fJ7tNStn

Score
8/10
adwarepersistencestealerupx

Malware Config

Targets

    • Target

      4e04cec2f2b9b6320b9978693b973cb2905fddb8fdf86f45fb11c360e30dae76

    • Size

      204KB

    • MD5

      0cf17a776f951d6993c5adc9a0bcf186

    • SHA1

      6a11aa3f62c19fa61812b684533457ef62af4231

    • SHA256

      4e04cec2f2b9b6320b9978693b973cb2905fddb8fdf86f45fb11c360e30dae76

    • SHA512

      4b4677631a1b45a79038b8901adc69e07fc3c539c1aaf313e0df331608d3d5a41667c1ebb8b584a19f2ee10282ef5dabcb837bc82c2a2787b1a100681f4d52d6

    • SSDEEP

      3072:+PSBxK5PidCBrz5tdr/lOe1+zq979pMsTN7f60DPPsiNdkyZ8nbJFvCZ:PAlKCBvZlONCN7fJ7tNStn

    Score
    8/10
    adwarepersistencestealerupx

    • Drops file in Drivers directory

    • Sets service image path in registry

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Deletes itself

    • Loads dropped DLL

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks