Overview

overview

8

Static

static

7e7839fb3e...c4.exe

windows7-x64

8

7e7839fb3e...c4.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7e7839fb3e990a6897212b794aa8722ebf68b97af05c114e30f81aeced48eac4

  • Size

    2.1MB

  • Sample

    221124-n92qgaff3y

  • MD5

    be8a68335905b89c8db2df87d3bf3fa7

  • SHA1

    6b577edc80a3120bca840594d12603e8d0adb8e5

  • SHA256

    7e7839fb3e990a6897212b794aa8722ebf68b97af05c114e30f81aeced48eac4

  • SHA512

    5f423a689f65ff6b3c9c63a339029493745d85a47d4857f928945ab20fba7c61742bb3821b33af54920952bba9fdfe13360678962a4fbc2850b6b2380ff8229d

  • SSDEEP

    24576:h1OYdaO5TwLleYkTVug2PiL0jHM8WK5z6Sh19BUfOD4XRt1otyBNvJvMXzGK5Iht:h1Os4LARTQ9PimJWtShQnvQsru2

Score
8/10
adwarediscoveryspywarestealer

Malware Config

Targets

    • Target

      7e7839fb3e990a6897212b794aa8722ebf68b97af05c114e30f81aeced48eac4

    • Size

      2.1MB

    • MD5

      be8a68335905b89c8db2df87d3bf3fa7

    • SHA1

      6b577edc80a3120bca840594d12603e8d0adb8e5

    • SHA256

      7e7839fb3e990a6897212b794aa8722ebf68b97af05c114e30f81aeced48eac4

    • SHA512

      5f423a689f65ff6b3c9c63a339029493745d85a47d4857f928945ab20fba7c61742bb3821b33af54920952bba9fdfe13360678962a4fbc2850b6b2380ff8229d

    • SSDEEP

      24576:h1OYdaO5TwLleYkTVug2PiL0jHM8WK5z6Sh19BUfOD4XRt1otyBNvJvMXzGK5Iht:h1Os4LARTQ9PimJWtShQnvQsru2

    Score
    8/10
    adwarediscoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Browser Extensions

1
T1176

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks