Overview

overview

8

Static

static

9dc64891be...2e.exe

windows7-x64

8

9dc64891be...2e.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9dc64891be105f96fc8b5a46714f2e71453927530cabaf13ec0879da169a022e

  • Size

    4.3MB

  • Sample

    221124-1f4n7abb58

  • MD5

    ed64871f3b8be88d93673e3a63041214

  • SHA1

    6dfd37c26b714ec5adb8ee8bb99e6d92989bf941

  • SHA256

    9dc64891be105f96fc8b5a46714f2e71453927530cabaf13ec0879da169a022e

  • SHA512

    d35c49c596c2a82e9c0886abacbeec99810a36f9c5bde5e8301f502bdcc97e0a78235e96aada4eab3d6587c1a9ae92ed3c65de54ee25eb8aa4e7191c7300e799

  • SSDEEP

    49152:XhOqIruzyb7SO6rmxup4WdGKvghxfki1mPXGIjQzB+lyzEJ3j3/:PuuzAT6YKcIP2iQ0YiT3

Score
8/10
adwarediscoverypersistencestealer

Malware Config

Targets

    • Target

      9dc64891be105f96fc8b5a46714f2e71453927530cabaf13ec0879da169a022e

    • Size

      4.3MB

    • MD5

      ed64871f3b8be88d93673e3a63041214

    • SHA1

      6dfd37c26b714ec5adb8ee8bb99e6d92989bf941

    • SHA256

      9dc64891be105f96fc8b5a46714f2e71453927530cabaf13ec0879da169a022e

    • SHA512

      d35c49c596c2a82e9c0886abacbeec99810a36f9c5bde5e8301f502bdcc97e0a78235e96aada4eab3d6587c1a9ae92ed3c65de54ee25eb8aa4e7191c7300e799

    • SSDEEP

      49152:XhOqIruzyb7SO6rmxup4WdGKvghxfki1mPXGIjQzB+lyzEJ3j3/:PuuzAT6YKcIP2iQ0YiT3

    Score
    8/10
    adwarediscoverypersistencestealer

    • Registers COM server for autorun

      persistence

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Browser Extensions

1
T1176

Privilege Escalation

Defense Evasion

Modify Registry

3
T1112

Credential Access

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks