Overview

overview

8

Static

static

ad4aaabccd...d1.exe

windows7-x64

8

ad4aaabccd...d1.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ad4aaabccda84d5236967b2d613e406cddb97516655e1bb36b31612ee50973d1

  • Size

    2.1MB

  • Sample

    221124-jpfkaahg82

  • MD5

    ead4c9c97f62257ad9137e60ad3d2129

  • SHA1

    2d113b35245c339d74fba5cb278f263845bbf56e

  • SHA256

    ad4aaabccda84d5236967b2d613e406cddb97516655e1bb36b31612ee50973d1

  • SHA512

    e85696520f30956c7191ac826715cb45d0d043e1d3ef6fee673048994321e39819e074a393fb4000c7663f55465d3f8f1a5f444cda6803f6d9a5ac34f7953a2c

  • SSDEEP

    24576:h1OYdaOWTwLleYkTVug2PiL0jHM8WK5z6Sh19BUfOD4XRt1otyBNvJvMXzGK5IhR:h1OstLARTQ9PimJWtShQnvQsruA

Score
8/10
adwarediscoveryspywarestealer

Malware Config

Targets

    • Target

      ad4aaabccda84d5236967b2d613e406cddb97516655e1bb36b31612ee50973d1

    • Size

      2.1MB

    • MD5

      ead4c9c97f62257ad9137e60ad3d2129

    • SHA1

      2d113b35245c339d74fba5cb278f263845bbf56e

    • SHA256

      ad4aaabccda84d5236967b2d613e406cddb97516655e1bb36b31612ee50973d1

    • SHA512

      e85696520f30956c7191ac826715cb45d0d043e1d3ef6fee673048994321e39819e074a393fb4000c7663f55465d3f8f1a5f444cda6803f6d9a5ac34f7953a2c

    • SSDEEP

      24576:h1OYdaOWTwLleYkTVug2PiL0jHM8WK5z6Sh19BUfOD4XRt1otyBNvJvMXzGK5IhR:h1OstLARTQ9PimJWtShQnvQsruA

    Score
    8/10
    adwarediscoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks