Overview

overview

8

Static

static

0e2c9a91e9...48.exe

windows7-x64

8

0e2c9a91e9...48.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0e2c9a91e981ffbc72f77b2678c2261e2aa70238b65c4dcc08413411cc6ffd48

  • Size

    2.1MB

  • Sample

    221123-3sj7esgd4z

  • MD5

    437f17d745a5a452aed9c946e62f7ed9

  • SHA1

    00df0f7c49e06c96849ee47c826dde06b90311e1

  • SHA256

    0e2c9a91e981ffbc72f77b2678c2261e2aa70238b65c4dcc08413411cc6ffd48

  • SHA512

    6631cc21926dc36c75e2335f5d99282a7381c243b5457bb5fdeb101010f09886a9fc1be599900a758623d2752dbc9b8e4aeea9c2dd9755058d00b11317d108a1

  • SSDEEP

    49152:h1OsUhvaZG1MVEtzijkTvu2x/uw4B8FHFF6p:h1OzvaxMziy38

Score
8/10
adwarediscoveryspywarestealer

Malware Config

Targets

    • Target

      0e2c9a91e981ffbc72f77b2678c2261e2aa70238b65c4dcc08413411cc6ffd48

    • Size

      2.1MB

    • MD5

      437f17d745a5a452aed9c946e62f7ed9

    • SHA1

      00df0f7c49e06c96849ee47c826dde06b90311e1

    • SHA256

      0e2c9a91e981ffbc72f77b2678c2261e2aa70238b65c4dcc08413411cc6ffd48

    • SHA512

      6631cc21926dc36c75e2335f5d99282a7381c243b5457bb5fdeb101010f09886a9fc1be599900a758623d2752dbc9b8e4aeea9c2dd9755058d00b11317d108a1

    • SSDEEP

      49152:h1OsUhvaZG1MVEtzijkTvu2x/uw4B8FHFF6p:h1OzvaxMziy38

    Score
    8/10
    adwarediscoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks