Overview

overview

8

Static

static

d08fe5fe30...32.exe

windows7-x64

8

d08fe5fe30...32.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d08fe5fe30dd8e58817736eb7a48d7b192a4c80a629a6dc450af41caa5e59a32

  • Size

    4.5MB

  • Sample

    221124-fwt5gabc82

  • MD5

    ebfa9fea9fa68bd67ece1aa05bbed1ac

  • SHA1

    00d4d46fc5297ac088bbd09bf4341ca35ed72628

  • SHA256

    d08fe5fe30dd8e58817736eb7a48d7b192a4c80a629a6dc450af41caa5e59a32

  • SHA512

    f0ca3d7ac48cec9f6f5c744c28528bc648a26bc611dd5522140297275e9e5bc9001652e52b00bcf7c4a65d582c3384ef05decfd56843ed48177423b14eecc885

  • SSDEEP

    49152:1YaKK5JkqteDSEnaxup4sEXOjKzuFYdkkkc7SKKjSlM/Zf0weeDNx5l:+OJkv2E+OjK9k67SKKj8MNtLNx5

Score
8/10
adwarediscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      d08fe5fe30dd8e58817736eb7a48d7b192a4c80a629a6dc450af41caa5e59a32

    • Size

      4.5MB

    • MD5

      ebfa9fea9fa68bd67ece1aa05bbed1ac

    • SHA1

      00d4d46fc5297ac088bbd09bf4341ca35ed72628

    • SHA256

      d08fe5fe30dd8e58817736eb7a48d7b192a4c80a629a6dc450af41caa5e59a32

    • SHA512

      f0ca3d7ac48cec9f6f5c744c28528bc648a26bc611dd5522140297275e9e5bc9001652e52b00bcf7c4a65d582c3384ef05decfd56843ed48177423b14eecc885

    • SSDEEP

      49152:1YaKK5JkqteDSEnaxup4sEXOjKzuFYdkkkc7SKKjSlM/Zf0weeDNx5l:+OJkv2E+OjK9k67SKKj8MNtLNx5

    Score
    8/10
    adwarediscoverypersistencespywarestealer

    • Registers COM server for autorun

      persistence

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks