Overview

overview

8

Static

static

e54b81b3b4...39.exe

windows7-x64

8

e54b81b3b4...39.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e54b81b3b492b2d0fea0b3ec5a23bfd3070f014fde5c90a8fd1a476f6cee9839

  • Size

    3.0MB

  • Sample

    221123-p3esssfh5x

  • MD5

    298d9f4141bbf96a65181018e438c0d2

  • SHA1

    3589a1c0fe75043adddc6f6b914fa5dc5d118957

  • SHA256

    e54b81b3b492b2d0fea0b3ec5a23bfd3070f014fde5c90a8fd1a476f6cee9839

  • SHA512

    141317d11fade4685435dc6beabcf3675fc583bea082d5b01283b965e0e39d132da6c6c235b7a0652d2c09a4a0df684040a9491eb72db9a02f62b4c930fcf203

  • SSDEEP

    49152:KakLXT1thrZAm2ypwiGJoZebkxlbFHuGlXcbKtNnHrN91F8ujWsBWKJmi:KaIXTUCKimkvbzxxLNFDjWtI

Score
8/10
adwarediscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      e54b81b3b492b2d0fea0b3ec5a23bfd3070f014fde5c90a8fd1a476f6cee9839

    • Size

      3.0MB

    • MD5

      298d9f4141bbf96a65181018e438c0d2

    • SHA1

      3589a1c0fe75043adddc6f6b914fa5dc5d118957

    • SHA256

      e54b81b3b492b2d0fea0b3ec5a23bfd3070f014fde5c90a8fd1a476f6cee9839

    • SHA512

      141317d11fade4685435dc6beabcf3675fc583bea082d5b01283b965e0e39d132da6c6c235b7a0652d2c09a4a0df684040a9491eb72db9a02f62b4c930fcf203

    • SSDEEP

      49152:KakLXT1thrZAm2ypwiGJoZebkxlbFHuGlXcbKtNnHrN91F8ujWsBWKJmi:KaIXTUCKimkvbzxxLNFDjWtI

    Score
    8/10
    adwarediscoverypersistencespywarestealer

    • Registers COM server for autorun

      persistence

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks