Overview

overview

8

Static

static

70533de831...00.exe

windows7-x64

8

70533de831...00.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    70533de8318e0cd7f2595dcdda569274ec38280500acbe73714eb25c241b1200

  • Size

    4.4MB

  • Sample

    221124-3z1sragf38

  • MD5

    41a64d0b0baf6764303a70215d37ff7d

  • SHA1

    a69a5e8c5302b8897a05519babd1d704682cd13a

  • SHA256

    70533de8318e0cd7f2595dcdda569274ec38280500acbe73714eb25c241b1200

  • SHA512

    997e31cb9786fe9159ead33e7b326121c3d80c3e64c086a851f661e1d3c778b8cef02c334616b3391e8b069fdc561ed74135dd6578dcb62261584b6b5aa952dd

  • SSDEEP

    49152:QXk098aJQu5Bq6fmxup46dGKvghxfki1/c7SK9yoC3yE/Ac5mWxnmG8y:smaJrM6AKca7SK4oWNAxenb8

Score
8/10
adwarediscoverypersistencestealer

Malware Config

Targets

    • Target

      70533de8318e0cd7f2595dcdda569274ec38280500acbe73714eb25c241b1200

    • Size

      4.4MB

    • MD5

      41a64d0b0baf6764303a70215d37ff7d

    • SHA1

      a69a5e8c5302b8897a05519babd1d704682cd13a

    • SHA256

      70533de8318e0cd7f2595dcdda569274ec38280500acbe73714eb25c241b1200

    • SHA512

      997e31cb9786fe9159ead33e7b326121c3d80c3e64c086a851f661e1d3c778b8cef02c334616b3391e8b069fdc561ed74135dd6578dcb62261584b6b5aa952dd

    • SSDEEP

      49152:QXk098aJQu5Bq6fmxup46dGKvghxfki1/c7SK9yoC3yE/Ac5mWxnmG8y:smaJrM6AKca7SK4oWNAxenb8

    Score
    8/10
    adwarediscoverypersistencestealer

    • Registers COM server for autorun

      persistence

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks