Overview

overview

8

Static

static

8c1f5b4d3b...6c.exe

windows7-x64

8

8c1f5b4d3b...6c.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    8c1f5b4d3b21ee66aafaa4a1a6f5820965cebdbb6c6e6d969bfe86934b5cdb6c

  • Size

    2.1MB

  • Sample

    221123-21yt4sed3z

  • MD5

    e28d53131d508c8f93bd2375318b2f29

  • SHA1

    b3c38d176d5cd956ead8cdd7a0b4a266607c8340

  • SHA256

    8c1f5b4d3b21ee66aafaa4a1a6f5820965cebdbb6c6e6d969bfe86934b5cdb6c

  • SHA512

    de15b7998049eda49d5951aca39e8352ce77301a5fdc9ea0f55861495ab8180be92c233022c1a543cfa93df658da20b3cc14f04cf6fe3b74d40d6518394f7dc3

  • SSDEEP

    49152:h1OssYIGWkf6jd9YMhKKumq+4oAczj/i6jgvb7GvKSB:h1Ovdd9YMhKgq+4fs

Score
8/10
adwarediscoveryspywarestealer

Malware Config

Targets

    • Target

      8c1f5b4d3b21ee66aafaa4a1a6f5820965cebdbb6c6e6d969bfe86934b5cdb6c

    • Size

      2.1MB

    • MD5

      e28d53131d508c8f93bd2375318b2f29

    • SHA1

      b3c38d176d5cd956ead8cdd7a0b4a266607c8340

    • SHA256

      8c1f5b4d3b21ee66aafaa4a1a6f5820965cebdbb6c6e6d969bfe86934b5cdb6c

    • SHA512

      de15b7998049eda49d5951aca39e8352ce77301a5fdc9ea0f55861495ab8180be92c233022c1a543cfa93df658da20b3cc14f04cf6fe3b74d40d6518394f7dc3

    • SSDEEP

      49152:h1OssYIGWkf6jd9YMhKKumq+4oAczj/i6jgvb7GvKSB:h1Ovdd9YMhKgq+4fs

    Score
    8/10
    adwarediscoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks