Overview

overview

8

Static

static

b5d14998c1...9e.exe

windows7-x64

8

b5d14998c1...9e.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b5d14998c1610cf6050b4c18ecfac39c2e5f71ae7f75a8e4bcd76a40c922c09e

  • Size

    2.1MB

  • Sample

    221123-2qba3ade9x

  • MD5

    a73681ae5f80d237ab9a627545f20131

  • SHA1

    9ceeb4d9024c4ad114c32ef644a2883649fb99eb

  • SHA256

    b5d14998c1610cf6050b4c18ecfac39c2e5f71ae7f75a8e4bcd76a40c922c09e

  • SHA512

    8861b1d7a205c260f9989828f9b4a764b3d51460845f0af539d9b492305136c53609979c855cbf0dc258005a647c996b44d1b5ae8b2fb6f8abb6ba85624cb771

  • SSDEEP

    49152:h1OsfyuyoY0IKAVWQrQSM5eeHY1h2PlSUQ8PciV:h1OQgoP9oM5LFN

Score
8/10
adwarediscoveryspywarestealer

Malware Config

Targets

    • Target

      b5d14998c1610cf6050b4c18ecfac39c2e5f71ae7f75a8e4bcd76a40c922c09e

    • Size

      2.1MB

    • MD5

      a73681ae5f80d237ab9a627545f20131

    • SHA1

      9ceeb4d9024c4ad114c32ef644a2883649fb99eb

    • SHA256

      b5d14998c1610cf6050b4c18ecfac39c2e5f71ae7f75a8e4bcd76a40c922c09e

    • SHA512

      8861b1d7a205c260f9989828f9b4a764b3d51460845f0af539d9b492305136c53609979c855cbf0dc258005a647c996b44d1b5ae8b2fb6f8abb6ba85624cb771

    • SSDEEP

      49152:h1OsfyuyoY0IKAVWQrQSM5eeHY1h2PlSUQ8PciV:h1OQgoP9oM5LFN

    Score
    8/10
    adwarediscoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks