Overview

overview

8

Static

static

ab85982cb1...e5.exe

windows7-x64

8

ab85982cb1...e5.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ab85982cb1585843c219eb00567f065cca98ee57486b68baeb3ae3dc89ef6de5

  • Size

    2.9MB

  • Sample

    221123-qn89jahd9z

  • MD5

    5a2133f9660e863282b1de1da73ee485

  • SHA1

    0644edf1de9d94ccfff0cb209cad8acdf2f79414

  • SHA256

    ab85982cb1585843c219eb00567f065cca98ee57486b68baeb3ae3dc89ef6de5

  • SHA512

    efbac9f41ec317783ddd7c4096d10c09b18c9ddc65009884ad9f9d90a77b3fe15f85e77fe6c77cae45a036656d9aa8f4476d9d1dde9a2bf0a39a4c604823ca43

  • SSDEEP

    49152:ffVNoP6URrq8DHZJh+N+Zcnq3GD4gM6SRlmYb/8jTIR4U:f0Rr9LZJh+Zqq6l7b/8TI2

Score
8/10
adwarediscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      ab85982cb1585843c219eb00567f065cca98ee57486b68baeb3ae3dc89ef6de5

    • Size

      2.9MB

    • MD5

      5a2133f9660e863282b1de1da73ee485

    • SHA1

      0644edf1de9d94ccfff0cb209cad8acdf2f79414

    • SHA256

      ab85982cb1585843c219eb00567f065cca98ee57486b68baeb3ae3dc89ef6de5

    • SHA512

      efbac9f41ec317783ddd7c4096d10c09b18c9ddc65009884ad9f9d90a77b3fe15f85e77fe6c77cae45a036656d9aa8f4476d9d1dde9a2bf0a39a4c604823ca43

    • SSDEEP

      49152:ffVNoP6URrq8DHZJh+N+Zcnq3GD4gM6SRlmYb/8jTIR4U:f0Rr9LZJh+Zqq6l7b/8TI2

    Score
    8/10
    adwarediscoverypersistencespywarestealer

    • Registers COM server for autorun

      persistence

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks