Overview

overview

9

Static

static

ade1dca75e...3b.exe

windows7-x64

9

ade1dca75e...3b.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ade1dca75ef112d7f965b076fdfabff597156c80788da53d619133af594d353b

  • Size

    768KB

  • Sample

    221123-qm6f9aed52

  • MD5

    ccfac39175fea6b4e52d9b3a3977a435

  • SHA1

    8b8e9bbbe899c16eb0efae3eddccfa76abc6bae9

  • SHA256

    ade1dca75ef112d7f965b076fdfabff597156c80788da53d619133af594d353b

  • SHA512

    0eb9ef5c2ad89cb4d8c1cdd69d5d31b161294f18b2557c96e0559fa57b0f17dd4ab613ba0eee24b49db2488eaf91b5917f10519dae28a50e17b8fd4b82cc8b93

  • SSDEEP

    12288:CHEUdIFVIfMG6oUaU9QyC5CbM+aXG0sammTwlLLevY:CkNE0ZarXT1m91LKY

Score
9/10
evasionpersistencespywarestealer

Malware Config

Targets

    • Target

      ade1dca75ef112d7f965b076fdfabff597156c80788da53d619133af594d353b

    • Size

      768KB

    • MD5

      ccfac39175fea6b4e52d9b3a3977a435

    • SHA1

      8b8e9bbbe899c16eb0efae3eddccfa76abc6bae9

    • SHA256

      ade1dca75ef112d7f965b076fdfabff597156c80788da53d619133af594d353b

    • SHA512

      0eb9ef5c2ad89cb4d8c1cdd69d5d31b161294f18b2557c96e0559fa57b0f17dd4ab613ba0eee24b49db2488eaf91b5917f10519dae28a50e17b8fd4b82cc8b93

    • SSDEEP

      12288:CHEUdIFVIfMG6oUaU9QyC5CbM+aXG0sammTwlLLevY:CkNE0ZarXT1m91LKY

    Score
    9/10
    evasionpersistencespywarestealer

    • Checks for common network interception software

      Looks in the registry for tools like Wireshark or Fiddler commonly used to analyze network activity.

      evasion

    • Enumerates VirtualBox registry keys

      evasion

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks