Overview

overview

8

Static

static

7ad04b5a23...74.exe

windows7-x64

8

7ad04b5a23...74.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7ad04b5a232e065e540da9780a2e8b2b5d6c3649b94668051b99954d5b8cf174

  • Size

    2.8MB

  • Sample

    221123-q7x1lsah6t

  • MD5

    43c802d87f629b3a3f2667e7e3cee1c5

  • SHA1

    cf47c49871f5ebcae170513acf3031d8ae197d5e

  • SHA256

    7ad04b5a232e065e540da9780a2e8b2b5d6c3649b94668051b99954d5b8cf174

  • SHA512

    194ff85a73d60b907dec42a2c767b8772895b336a3c0b42995532dc7aaef4dbdc66a181990b642bdd8a89af7db47deef7aebae25382d90e36c89c284773257ad

  • SSDEEP

    49152:4G5+M/lI00WE93nWvAnT86brWq4UE9/cMSOos4TRVH7IzcPeU34:H0ZTDWyE9/cnOonP

Score
8/10
adwarediscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      7ad04b5a232e065e540da9780a2e8b2b5d6c3649b94668051b99954d5b8cf174

    • Size

      2.8MB

    • MD5

      43c802d87f629b3a3f2667e7e3cee1c5

    • SHA1

      cf47c49871f5ebcae170513acf3031d8ae197d5e

    • SHA256

      7ad04b5a232e065e540da9780a2e8b2b5d6c3649b94668051b99954d5b8cf174

    • SHA512

      194ff85a73d60b907dec42a2c767b8772895b336a3c0b42995532dc7aaef4dbdc66a181990b642bdd8a89af7db47deef7aebae25382d90e36c89c284773257ad

    • SSDEEP

      49152:4G5+M/lI00WE93nWvAnT86brWq4UE9/cMSOos4TRVH7IzcPeU34:H0ZTDWyE9/cnOonP

    Score
    8/10
    adwarediscoverypersistencespywarestealer

    • Registers COM server for autorun

      persistence

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks