Overview

overview

8

Static

static

2244324824...53.exe

windows7-x64

8

2244324824...53.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2244324824d1660985d19ca2ad1ddb3bf845cf8dd0b6f7a5254c6ef8bbd62453

  • Size

    2.1MB

  • Sample

    221124-fze5qaee3v

  • MD5

    f059e0b251833be5b5aff927edb6a19b

  • SHA1

    c262847d37f3df9b997660f689a09613eeaa78c6

  • SHA256

    2244324824d1660985d19ca2ad1ddb3bf845cf8dd0b6f7a5254c6ef8bbd62453

  • SHA512

    95931e251e75589cfd4a5cf0eb8bf8184e09159c772badb1546e14988ccf064fc4166773115ccd875de9c1a4d458f4a5eac0bf6e02d649dd8d93043bf5884e24

  • SSDEEP

    24576:h1OYdaOujfen1Y6KIc8dPc3Mp6CzcJcB1TE1VyDGxQQYxMfyylmCHxxyJGb8tt:h1OsmZIdJc346K1TcAGb8tt

Score
8/10
adwarediscoveryspywarestealer

Malware Config

Targets

    • Target

      2244324824d1660985d19ca2ad1ddb3bf845cf8dd0b6f7a5254c6ef8bbd62453

    • Size

      2.1MB

    • MD5

      f059e0b251833be5b5aff927edb6a19b

    • SHA1

      c262847d37f3df9b997660f689a09613eeaa78c6

    • SHA256

      2244324824d1660985d19ca2ad1ddb3bf845cf8dd0b6f7a5254c6ef8bbd62453

    • SHA512

      95931e251e75589cfd4a5cf0eb8bf8184e09159c772badb1546e14988ccf064fc4166773115ccd875de9c1a4d458f4a5eac0bf6e02d649dd8d93043bf5884e24

    • SSDEEP

      24576:h1OYdaOujfen1Y6KIc8dPc3Mp6CzcJcB1TE1VyDGxQQYxMfyylmCHxxyJGb8tt:h1OsmZIdJc346K1TcAGb8tt

    Score
    8/10
    adwarediscoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks