Overview

overview

8

Static

static

9e43c6d09b...42.exe

windows7-x64

8

9e43c6d09b...42.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9e43c6d09b6ec266044ac8aa2b8d2a8b6bc68985492d8b36f2819fc153be1b42

  • Size

    4.4MB

  • Sample

    221124-1e7z8abb25

  • MD5

    68feda9d44a28617e38ae9ac816aa375

  • SHA1

    d7e89c02af91e78cfd69b3b59e5a8c61a6c34d1b

  • SHA256

    9e43c6d09b6ec266044ac8aa2b8d2a8b6bc68985492d8b36f2819fc153be1b42

  • SHA512

    1f441b44a506bfdef6f10058016cdecee63abd7b4e2382b67c8e9a9b3fc8b3e143cbdeee203ed10f07555618df1eddcb73ffc9787120b3d21673c4d9ce2f83e1

  • SSDEEP

    49152:1Kk0d1vZSO6E3aDmxup4kdGKvghxfki1buc7SKpFZ8hpTQdKS:M/vZGQaWKcx7SKDZspsdK

Score
8/10
adwarediscoverypersistencestealer

Malware Config

Targets

    • Target

      9e43c6d09b6ec266044ac8aa2b8d2a8b6bc68985492d8b36f2819fc153be1b42

    • Size

      4.4MB

    • MD5

      68feda9d44a28617e38ae9ac816aa375

    • SHA1

      d7e89c02af91e78cfd69b3b59e5a8c61a6c34d1b

    • SHA256

      9e43c6d09b6ec266044ac8aa2b8d2a8b6bc68985492d8b36f2819fc153be1b42

    • SHA512

      1f441b44a506bfdef6f10058016cdecee63abd7b4e2382b67c8e9a9b3fc8b3e143cbdeee203ed10f07555618df1eddcb73ffc9787120b3d21673c4d9ce2f83e1

    • SSDEEP

      49152:1Kk0d1vZSO6E3aDmxup4kdGKvghxfki1buc7SKpFZ8hpTQdKS:M/vZGQaWKcx7SKDZspsdK

    Score
    8/10
    adwarediscoverypersistencestealer

    • Registers COM server for autorun

      persistence

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Browser Extensions

1
T1176

Privilege Escalation

Defense Evasion

Modify Registry

3
T1112

Credential Access

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks