Overview

overview

8

Static

static

c42b914076...87.exe

windows7-x64

8

c42b914076...87.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c42b914076231e4e3e4ec95bc54cf821987e8538348f7e8ec95b03cbea84ef87

  • Size

    2.5MB

  • Sample

    221124-ybkdmsec95

  • MD5

    60ca1615601a2a5d64c8299f889bc913

  • SHA1

    9b07f70283fb631e9373ada91912f12a9322d056

  • SHA256

    c42b914076231e4e3e4ec95bc54cf821987e8538348f7e8ec95b03cbea84ef87

  • SHA512

    2cf6b977c69e9ed99d6ac237e045a37108a5cce31c23954810ee810a1b3b0726cff48a9e59e986e166ee467c2af837126297e6e657f6ef3a54550123f2a898ba

  • SSDEEP

    49152:h1OsrSQeb71DLvFzAqRmyyVchO4apKHcHhXa3FXWlPC1IS5zQ:h1OYSQY1DCqkck4apyLq9

Score
8/10
adwarediscoveryspywarestealer

Malware Config

Targets

    • Target

      c42b914076231e4e3e4ec95bc54cf821987e8538348f7e8ec95b03cbea84ef87

    • Size

      2.5MB

    • MD5

      60ca1615601a2a5d64c8299f889bc913

    • SHA1

      9b07f70283fb631e9373ada91912f12a9322d056

    • SHA256

      c42b914076231e4e3e4ec95bc54cf821987e8538348f7e8ec95b03cbea84ef87

    • SHA512

      2cf6b977c69e9ed99d6ac237e045a37108a5cce31c23954810ee810a1b3b0726cff48a9e59e986e166ee467c2af837126297e6e657f6ef3a54550123f2a898ba

    • SSDEEP

      49152:h1OsrSQeb71DLvFzAqRmyyVchO4apKHcHhXa3FXWlPC1IS5zQ:h1OYSQY1DCqkck4apyLq9

    Score
    8/10
    adwarediscoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Browser Extensions

1
T1176

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks