Overview

overview

8

Static

static

7f5847e4b2...61.exe

windows7-x64

8

7f5847e4b2...61.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7f5847e4b21f5803ad2f2785171dd550c8cbac89c3466af73dd35a0c1a69f361

  • Size

    4.5MB

  • Sample

    221124-26mc9seg85

  • MD5

    b39c3689ab3c513536ad9fa89f30f8ec

  • SHA1

    a3fdaec8f6ab9cc27eeea6165cb45901c8624206

  • SHA256

    7f5847e4b21f5803ad2f2785171dd550c8cbac89c3466af73dd35a0c1a69f361

  • SHA512

    370a4846e6dbb0a5c7aabda833ece20c5d36ce56367749606c852df03c7473cd2633ec57ec8822d198441cbe8ecc37953ea2a5889bd04f873735d6cfac5f02ff

  • SSDEEP

    49152:BoaKaJJEq9+zJUHaxup404pXOjKzuFYdkL9buOBqFkZ8hpTQduR:6OJE/tUM9OjK9kBbuOBqFkZspsdu

Score
8/10
adwarediscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      7f5847e4b21f5803ad2f2785171dd550c8cbac89c3466af73dd35a0c1a69f361

    • Size

      4.5MB

    • MD5

      b39c3689ab3c513536ad9fa89f30f8ec

    • SHA1

      a3fdaec8f6ab9cc27eeea6165cb45901c8624206

    • SHA256

      7f5847e4b21f5803ad2f2785171dd550c8cbac89c3466af73dd35a0c1a69f361

    • SHA512

      370a4846e6dbb0a5c7aabda833ece20c5d36ce56367749606c852df03c7473cd2633ec57ec8822d198441cbe8ecc37953ea2a5889bd04f873735d6cfac5f02ff

    • SSDEEP

      49152:BoaKaJJEq9+zJUHaxup404pXOjKzuFYdkL9buOBqFkZ8hpTQduR:6OJE/tUM9OjK9kBbuOBqFkZspsdu

    Score
    8/10
    adwarediscoverypersistencespywarestealer

    • Registers COM server for autorun

      persistence

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Browser Extensions

1
T1176

Privilege Escalation

Defense Evasion

Modify Registry

3
T1112

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks