Overview

overview

8

Static

static

b87a39cf4d...fa.exe

windows7-x64

8

b87a39cf4d...fa.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b87a39cf4d0bfcb643f754bddd5d459e77a62475c792bd11db432c8e8b4f02fa

  • Size

    244KB

  • Sample

    221123-s3wcbsga3s

  • MD5

    ebe58dda0e680bad20a1bd6adb5eea8a

  • SHA1

    64aded078b22cc30e68dc8d92855f25bf8e9f7b4

  • SHA256

    b87a39cf4d0bfcb643f754bddd5d459e77a62475c792bd11db432c8e8b4f02fa

  • SHA512

    df2d098efc18f77e90959b4732f84d4afa7251af2f92b4dd99e78bdb725176e2dca11aff0ef241469077d756725166a1a9ba1df7c8469643adc856db9cf4909e

  • SSDEEP

    6144:SLdOyetKju521va44L0ZgQHPVFttiRJuBY9:WFetF56WOHPntQR/

Score
8/10
adwarepersistencestealer

Malware Config

Targets

    • Target

      b87a39cf4d0bfcb643f754bddd5d459e77a62475c792bd11db432c8e8b4f02fa

    • Size

      244KB

    • MD5

      ebe58dda0e680bad20a1bd6adb5eea8a

    • SHA1

      64aded078b22cc30e68dc8d92855f25bf8e9f7b4

    • SHA256

      b87a39cf4d0bfcb643f754bddd5d459e77a62475c792bd11db432c8e8b4f02fa

    • SHA512

      df2d098efc18f77e90959b4732f84d4afa7251af2f92b4dd99e78bdb725176e2dca11aff0ef241469077d756725166a1a9ba1df7c8469643adc856db9cf4909e

    • SSDEEP

      6144:SLdOyetKju521va44L0ZgQHPVFttiRJuBY9:WFetF56WOHPntQR/

    Score
    8/10
    adwarepersistencestealer

    • Executes dropped EXE

    • Sets DLL path for service in the registry

      persistence

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks