Overview

overview

8

Static

static

d261442753...07.exe

windows7-x64

8

d261442753...07.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    d261442753870446e3bd5e2bd90a33238a5a0bf7f114638d88f8e07b50a03e07

  • Size

    2.1MB

  • Sample

    221123-2hrm3saa24

  • MD5

    5b290628bf903a51088119913d15ea17

  • SHA1

    c0bdfa20bd8bf0cc8e0cac097da6c8c8abd11c2f

  • SHA256

    d261442753870446e3bd5e2bd90a33238a5a0bf7f114638d88f8e07b50a03e07

  • SHA512

    d67b876269fee2c0a68b26f2e06b8113f0ed2e3f31f4b247e04af8c37f76eb1f0e1a335cb63e43a167c0b2ef476c3d2f019324beff3136f71a0221521c57f8c1

  • SSDEEP

    49152:h1OsJYIGWkf6jd9YMhKKumq+4oAczj/i6jgvb7GvKSs:h1OCdd9YMhKgq+4fJ

Score
8/10
adwarediscoveryspywarestealer

Malware Config

Targets

    • Target

      d261442753870446e3bd5e2bd90a33238a5a0bf7f114638d88f8e07b50a03e07

    • Size

      2.1MB

    • MD5

      5b290628bf903a51088119913d15ea17

    • SHA1

      c0bdfa20bd8bf0cc8e0cac097da6c8c8abd11c2f

    • SHA256

      d261442753870446e3bd5e2bd90a33238a5a0bf7f114638d88f8e07b50a03e07

    • SHA512

      d67b876269fee2c0a68b26f2e06b8113f0ed2e3f31f4b247e04af8c37f76eb1f0e1a335cb63e43a167c0b2ef476c3d2f019324beff3136f71a0221521c57f8c1

    • SSDEEP

      49152:h1OsJYIGWkf6jd9YMhKKumq+4oAczj/i6jgvb7GvKSs:h1OCdd9YMhKgq+4fJ

    Score
    8/10
    adwarediscoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks