Overview

overview

8

Static

static

57c80a66bc...14.exe

windows7-x64

8

57c80a66bc...14.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    57c80a66bc12f38f18f3464fd952e90002c12d760092d0056b082959b51f1914

  • Size

    3.9MB

  • Sample

    221123-vpdapsce5y

  • MD5

    16b5cff8031d356826c606566fe11913

  • SHA1

    fb4e261f105449f822660015f3bcd5c14ff43357

  • SHA256

    57c80a66bc12f38f18f3464fd952e90002c12d760092d0056b082959b51f1914

  • SHA512

    674ba5fb54a119c30b3d8ddf888870163217eb1e9224e88fe2aaa2ec4312179466e2d051ce45d8f633f07f1c271f16d7abf0ee3bfa22e9124368fac3a18ec914

  • SSDEEP

    98304:coF+6k/blpeEOsXr2Fj5wN8WUNElTcoHr9nCVJTa8O5fYrsWcTwX/9uPUk+KfIpx:dk/jeALfMXf

Score
8/10
adwarediscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      57c80a66bc12f38f18f3464fd952e90002c12d760092d0056b082959b51f1914

    • Size

      3.9MB

    • MD5

      16b5cff8031d356826c606566fe11913

    • SHA1

      fb4e261f105449f822660015f3bcd5c14ff43357

    • SHA256

      57c80a66bc12f38f18f3464fd952e90002c12d760092d0056b082959b51f1914

    • SHA512

      674ba5fb54a119c30b3d8ddf888870163217eb1e9224e88fe2aaa2ec4312179466e2d051ce45d8f633f07f1c271f16d7abf0ee3bfa22e9124368fac3a18ec914

    • SSDEEP

      98304:coF+6k/blpeEOsXr2Fj5wN8WUNElTcoHr9nCVJTa8O5fYrsWcTwX/9uPUk+KfIpx:dk/jeALfMXf

    Score
    8/10
    adwarediscoverypersistencespywarestealer

    • Registers COM server for autorun

      persistence

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Browser Extensions

1
T1176

Privilege Escalation

Defense Evasion

Modify Registry

3
T1112

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks