Overview

overview

8

Static

static

483925ef4a...30.exe

windows7-x64

8

483925ef4a...30.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    483925ef4abc083ecf1fcfb4fdc4fd369e576bbb5d12cb5dac426aec1a0db830

  • Size

    3.6MB

  • Sample

    221123-vv729sda7x

  • MD5

    2f1291c3d0431b57a14ab2270cfda68e

  • SHA1

    90bb09521b074466c4e51d16d2bda66e9e05c6ad

  • SHA256

    483925ef4abc083ecf1fcfb4fdc4fd369e576bbb5d12cb5dac426aec1a0db830

  • SHA512

    1f09cc0268243f0af4f52955b7354d2ea994503281a9753f892b54b69e643244cf256a037879cb3cbaf7d52a354a7f83d30905a22d9c007614a96e64af77eace

  • SSDEEP

    49152:Sem8syjJ2ShrPsMqZTZZa5ylkCUbvZ3x+JPPV2zB8zDT387AzqeD/SUgMtVMc3:BR/92wPC/ZOXbR34Pgo7Df/R

Score
8/10
adwarediscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      483925ef4abc083ecf1fcfb4fdc4fd369e576bbb5d12cb5dac426aec1a0db830

    • Size

      3.6MB

    • MD5

      2f1291c3d0431b57a14ab2270cfda68e

    • SHA1

      90bb09521b074466c4e51d16d2bda66e9e05c6ad

    • SHA256

      483925ef4abc083ecf1fcfb4fdc4fd369e576bbb5d12cb5dac426aec1a0db830

    • SHA512

      1f09cc0268243f0af4f52955b7354d2ea994503281a9753f892b54b69e643244cf256a037879cb3cbaf7d52a354a7f83d30905a22d9c007614a96e64af77eace

    • SSDEEP

      49152:Sem8syjJ2ShrPsMqZTZZa5ylkCUbvZ3x+JPPV2zB8zDT387AzqeD/SUgMtVMc3:BR/92wPC/ZOXbR34Pgo7Df/R

    Score
    8/10
    adwarediscoverypersistencespywarestealer

    • Registers COM server for autorun

      persistence

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks