Overview

overview

8

Static

static

6bba2ab6c2...ec.exe

windows7-x64

8

6bba2ab6c2...ec.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6bba2ab6c28b36f583f2a26c52f63b4b5dfdcfb9b663ad84d9582773e5219bec

  • Size

    2.1MB

  • Sample

    221124-jvdmwadb2z

  • MD5

    5e6f8186eebf8ad4a019c90efff3d0ea

  • SHA1

    be04a5ead6b97e809e01765c4a399cffd901b7db

  • SHA256

    6bba2ab6c28b36f583f2a26c52f63b4b5dfdcfb9b663ad84d9582773e5219bec

  • SHA512

    65640bfdfb0a3c8dff75dde2e643f57bf5e24462ab80e414ddc3d4ebe81d1fed113c6bb68663d5daeec672a79d081d7ab2b7271686f506caa957bda8b916fa1c

  • SSDEEP

    24576:h1OYdaO8TwLleYkTVug2PiL0jHM8WK5z6Sh19BUfOD4XRt1otyBNvJvMXzGK5IhT:h1OsnLARTQ9PimJWtShQnvQsruE

Score
8/10
adwarediscoveryspywarestealer

Malware Config

Targets

    • Target

      6bba2ab6c28b36f583f2a26c52f63b4b5dfdcfb9b663ad84d9582773e5219bec

    • Size

      2.1MB

    • MD5

      5e6f8186eebf8ad4a019c90efff3d0ea

    • SHA1

      be04a5ead6b97e809e01765c4a399cffd901b7db

    • SHA256

      6bba2ab6c28b36f583f2a26c52f63b4b5dfdcfb9b663ad84d9582773e5219bec

    • SHA512

      65640bfdfb0a3c8dff75dde2e643f57bf5e24462ab80e414ddc3d4ebe81d1fed113c6bb68663d5daeec672a79d081d7ab2b7271686f506caa957bda8b916fa1c

    • SSDEEP

      24576:h1OYdaO8TwLleYkTVug2PiL0jHM8WK5z6Sh19BUfOD4XRt1otyBNvJvMXzGK5IhT:h1OsnLARTQ9PimJWtShQnvQsruE

    Score
    8/10
    adwarediscoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks