Overview

overview

8

Static

static

d627414d31...c0.exe

windows7-x64

8

d627414d31...c0.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d627414d31722551d6cc7fd8c2261b9c889a75a7b0b63f6e3520bdec017dcfc0

  • Size

    2.1MB

  • Sample

    221123-s8w6tadc92

  • MD5

    c69e67939a92d6062f46c7ad9d40ba13

  • SHA1

    93f6bc2992b8d2f6c18cdc268b8591766a8ec209

  • SHA256

    d627414d31722551d6cc7fd8c2261b9c889a75a7b0b63f6e3520bdec017dcfc0

  • SHA512

    6da80e19e1895dfecaabfe7399fd6e1726b347eb8577c85639aa73fab295843b791b137864f762b92ccbd1da8185fde22955b6409d9101cdab539870f96b535f

  • SSDEEP

    49152:h1OscAxPqbaJ0CqWfTAeP20icuFMDoiXrBSdCIlE05XwjXr3C:h1OxAxib7CqWfTAeP2vaDhtSdpP

Score
8/10
adwarediscoveryspywarestealer

Malware Config

Targets

    • Target

      d627414d31722551d6cc7fd8c2261b9c889a75a7b0b63f6e3520bdec017dcfc0

    • Size

      2.1MB

    • MD5

      c69e67939a92d6062f46c7ad9d40ba13

    • SHA1

      93f6bc2992b8d2f6c18cdc268b8591766a8ec209

    • SHA256

      d627414d31722551d6cc7fd8c2261b9c889a75a7b0b63f6e3520bdec017dcfc0

    • SHA512

      6da80e19e1895dfecaabfe7399fd6e1726b347eb8577c85639aa73fab295843b791b137864f762b92ccbd1da8185fde22955b6409d9101cdab539870f96b535f

    • SSDEEP

      49152:h1OscAxPqbaJ0CqWfTAeP20icuFMDoiXrBSdCIlE05XwjXr3C:h1OxAxib7CqWfTAeP2vaDhtSdpP

    Score
    8/10
    adwarediscoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Browser Extensions

1
T1176

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks