Overview

overview

8

Static

static

adbce168c4...a6.exe

windows7-x64

8

adbce168c4...a6.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    adbce168c4b38361e6185f43ab0001f76adc6d427fcc5cf4cdef3e8aa6b299a6

  • Size

    2.1MB

  • Sample

    221124-fknhjsde9z

  • MD5

    41987dd8d5ceffad06e4cf09bbc448de

  • SHA1

    8633bbfb07a51d0e1d111e16f66f26e07ce8c43c

  • SHA256

    adbce168c4b38361e6185f43ab0001f76adc6d427fcc5cf4cdef3e8aa6b299a6

  • SHA512

    61702783a7404e073f46ddd44a9b5091ca9ef50f99eb44af05091798bf4559799941df359cbffe4794edd84117d1dcc13fc6d7eb5eec01e238c180e98b7972f9

  • SSDEEP

    24576:h1OYdaOCjfen1Y6KIc8dPc3Mp6CzcJcB1TE1VyDGxQQYxMfyylmCHxxyJGb8tF:h1OsaZIdJc346K1TcAGb8tF

Score
8/10
adwarediscoveryspywarestealer

Malware Config

Targets

    • Target

      adbce168c4b38361e6185f43ab0001f76adc6d427fcc5cf4cdef3e8aa6b299a6

    • Size

      2.1MB

    • MD5

      41987dd8d5ceffad06e4cf09bbc448de

    • SHA1

      8633bbfb07a51d0e1d111e16f66f26e07ce8c43c

    • SHA256

      adbce168c4b38361e6185f43ab0001f76adc6d427fcc5cf4cdef3e8aa6b299a6

    • SHA512

      61702783a7404e073f46ddd44a9b5091ca9ef50f99eb44af05091798bf4559799941df359cbffe4794edd84117d1dcc13fc6d7eb5eec01e238c180e98b7972f9

    • SSDEEP

      24576:h1OYdaOCjfen1Y6KIc8dPc3Mp6CzcJcB1TE1VyDGxQQYxMfyylmCHxxyJGb8tF:h1OsaZIdJc346K1TcAGb8tF

    Score
    8/10
    adwarediscoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks