Overview

overview

8

Static

static

fd44e58fef...1c.exe

windows7-x64

8

fd44e58fef...1c.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fd44e58fef73d7ddf2897ce569189bc90dfbf5d2ccdb5b7197af8c755e502b1c

  • Size

    4.3MB

  • Sample

    221124-ty322sfc38

  • MD5

    07ff8dee7df0af5140a9da00d160f1d8

  • SHA1

    e9d7166aa21be2ec65a33683efd4f3fb60fa9844

  • SHA256

    fd44e58fef73d7ddf2897ce569189bc90dfbf5d2ccdb5b7197af8c755e502b1c

  • SHA512

    f0a0a0c392e1b8fcd9810b47ae1a7fc38954e0d06292df3cf70cfd939973b6d3e69202e6e4e1710ab11fe858760619232c1d92c1fcebe3e5634275a40037d793

  • SSDEEP

    49152:tiOqoT5U2XC5Oarmxup4ddGKvghxfki1X9buOBqFyyoC3yE/Ac5mWxnmef:M25UdQaHKcPbuOBqFJoWNAxenl

Score
8/10
adwarediscoverypersistencestealer

Malware Config

Targets

    • Target

      fd44e58fef73d7ddf2897ce569189bc90dfbf5d2ccdb5b7197af8c755e502b1c

    • Size

      4.3MB

    • MD5

      07ff8dee7df0af5140a9da00d160f1d8

    • SHA1

      e9d7166aa21be2ec65a33683efd4f3fb60fa9844

    • SHA256

      fd44e58fef73d7ddf2897ce569189bc90dfbf5d2ccdb5b7197af8c755e502b1c

    • SHA512

      f0a0a0c392e1b8fcd9810b47ae1a7fc38954e0d06292df3cf70cfd939973b6d3e69202e6e4e1710ab11fe858760619232c1d92c1fcebe3e5634275a40037d793

    • SSDEEP

      49152:tiOqoT5U2XC5Oarmxup4ddGKvghxfki1X9buOBqFyyoC3yE/Ac5mWxnmef:M25UdQaHKcPbuOBqFJoWNAxenl

    Score
    8/10
    adwarediscoverypersistencestealer

    • Registers COM server for autorun

      persistence

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Browser Extensions

1
T1176

Privilege Escalation

Defense Evasion

Modify Registry

3
T1112

Credential Access

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks