Overview

overview

8

Static

static

25276ff09c...d4.exe

windows7-x64

8

25276ff09c...d4.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    25276ff09c53aa540db4aacf5c1ba026cbb01d98145c984c11739678899d6cd4

  • Size

    3.1MB

  • Sample

    221123-r4845sdd4s

  • MD5

    b04eeca467e087f2b6e790470760ef41

  • SHA1

    d350cb86656c2c199bf4c1f7dd87d76a313269b4

  • SHA256

    25276ff09c53aa540db4aacf5c1ba026cbb01d98145c984c11739678899d6cd4

  • SHA512

    54fd90d1420ade3a682257c49f04973358c3629660a7e39957d262ed4a63aac4d6008863fae65191b3fd83457c701937cc0eabef1f560f558c642f0c5dca00fd

  • SSDEEP

    49152:VXCLQbeGze7bSi8x9BKCWLMT/95j0YZ0ZMGSqN+ICvNqE/lL8kG1:VSU1i3u/jnZ0ZvSqFE/+

Score
8/10
adwarediscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      25276ff09c53aa540db4aacf5c1ba026cbb01d98145c984c11739678899d6cd4

    • Size

      3.1MB

    • MD5

      b04eeca467e087f2b6e790470760ef41

    • SHA1

      d350cb86656c2c199bf4c1f7dd87d76a313269b4

    • SHA256

      25276ff09c53aa540db4aacf5c1ba026cbb01d98145c984c11739678899d6cd4

    • SHA512

      54fd90d1420ade3a682257c49f04973358c3629660a7e39957d262ed4a63aac4d6008863fae65191b3fd83457c701937cc0eabef1f560f558c642f0c5dca00fd

    • SSDEEP

      49152:VXCLQbeGze7bSi8x9BKCWLMT/95j0YZ0ZMGSqN+ICvNqE/lL8kG1:VSU1i3u/jnZ0ZvSqFE/+

    Score
    8/10
    adwarediscoverypersistencespywarestealer

    • Registers COM server for autorun

      persistence

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks