Overview

overview

8

Static

static

866b83a2d4...19.exe

windows7-x64

8

866b83a2d4...19.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    866b83a2d4dc367718836d3f657503b381fa99a755aa533e3d95c79ac6643919

  • Size

    3.0MB

  • Sample

    221124-2rw9xshb8z

  • MD5

    e1fa83f71697f2d2bc0179260e52a47f

  • SHA1

    177e8a80de6b6e6f666956624f2663c6c45e0e2c

  • SHA256

    866b83a2d4dc367718836d3f657503b381fa99a755aa533e3d95c79ac6643919

  • SHA512

    8d4a18f8fdb70937b88b9bb13521650fd0ec4f8a7ba7e605f5e6338510321ee00f6cc3a2a5c09363d9670521d535867f925249bbbbefb7df779fcf20327e2b92

  • SSDEEP

    49152:9a+rpFCFSaMUnkl+Px8Av5jt+L83m6veJ2ujTEhAWSHZfynkmt:9aCpFCnkl+pr5jt+La28unEi1Ok

Score
8/10
adwarediscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      866b83a2d4dc367718836d3f657503b381fa99a755aa533e3d95c79ac6643919

    • Size

      3.0MB

    • MD5

      e1fa83f71697f2d2bc0179260e52a47f

    • SHA1

      177e8a80de6b6e6f666956624f2663c6c45e0e2c

    • SHA256

      866b83a2d4dc367718836d3f657503b381fa99a755aa533e3d95c79ac6643919

    • SHA512

      8d4a18f8fdb70937b88b9bb13521650fd0ec4f8a7ba7e605f5e6338510321ee00f6cc3a2a5c09363d9670521d535867f925249bbbbefb7df779fcf20327e2b92

    • SSDEEP

      49152:9a+rpFCFSaMUnkl+Px8Av5jt+L83m6veJ2ujTEhAWSHZfynkmt:9aCpFCnkl+pr5jt+La28unEi1Ok

    Score
    8/10
    adwarediscoverypersistencespywarestealer

    • Registers COM server for autorun

      persistence

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks