Overview

overview

8

Static

static

985a01528b...59.exe

windows7-x64

8

985a01528b...59.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    985a01528b43bd6fe3f140a56ab8a48a64d054241edbabd94093d6bd4278a959

  • Size

    4.4MB

  • Sample

    221124-pj32aadb42

  • MD5

    5b7f9180b1601140a33ef3829894179a

  • SHA1

    583457582d205820bf3dc89c4f8397b4f9748e5b

  • SHA256

    985a01528b43bd6fe3f140a56ab8a48a64d054241edbabd94093d6bd4278a959

  • SHA512

    f7325cb6acee8cde84cf7887481f46b8261a3a3200eb5d4a4c193015837ac8ea3110af42ed82e99fc4303c8cd39be6c1ee4db3fdf7989dfd4f63132c406711a5

  • SSDEEP

    49152:5ptaKqZePyh/gSknaxup49tC/XOjKzuFYdkI9buOBqFFZ8hpTQdpF:fLWePKZkJPOjK9k0buOBqFFZspsdp

Score
8/10
adwarediscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      985a01528b43bd6fe3f140a56ab8a48a64d054241edbabd94093d6bd4278a959

    • Size

      4.4MB

    • MD5

      5b7f9180b1601140a33ef3829894179a

    • SHA1

      583457582d205820bf3dc89c4f8397b4f9748e5b

    • SHA256

      985a01528b43bd6fe3f140a56ab8a48a64d054241edbabd94093d6bd4278a959

    • SHA512

      f7325cb6acee8cde84cf7887481f46b8261a3a3200eb5d4a4c193015837ac8ea3110af42ed82e99fc4303c8cd39be6c1ee4db3fdf7989dfd4f63132c406711a5

    • SSDEEP

      49152:5ptaKqZePyh/gSknaxup49tC/XOjKzuFYdkI9buOBqFFZ8hpTQdpF:fLWePKZkJPOjK9k0buOBqFFZspsdp

    Score
    8/10
    adwarediscoverypersistencespywarestealer

    • Registers COM server for autorun

      persistence

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks