Overview

overview

8

Static

static

ad1946ed82...e5.exe

windows7-x64

8

ad1946ed82...e5.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ad1946ed829ca2bd12aa67918663977f89a64957a64e78ae7685ad415d4b9be5

  • Size

    4.1MB

  • Sample

    221124-znt92shd49

  • MD5

    bc56300ba7bda56ced44113386957b84

  • SHA1

    90b5b38bbd0ee3c56540e028eab1a3499c5c6e98

  • SHA256

    ad1946ed829ca2bd12aa67918663977f89a64957a64e78ae7685ad415d4b9be5

  • SHA512

    116e88891ebc26cfbafe93e4e54a4875eb1b346d69424942e73f0f0815db5aa128780e1a974ba411c13de2addc555ba866bac1558370049afb6c0ff656592c80

  • SSDEEP

    49152:ec+mE815o/IC2jsB1A0wzpOnfwZU5BcumPqZSyavWO3ATPZro:e1mNXCXcp1qXavWOwbV

Score
8/10
adwarediscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      ad1946ed829ca2bd12aa67918663977f89a64957a64e78ae7685ad415d4b9be5

    • Size

      4.1MB

    • MD5

      bc56300ba7bda56ced44113386957b84

    • SHA1

      90b5b38bbd0ee3c56540e028eab1a3499c5c6e98

    • SHA256

      ad1946ed829ca2bd12aa67918663977f89a64957a64e78ae7685ad415d4b9be5

    • SHA512

      116e88891ebc26cfbafe93e4e54a4875eb1b346d69424942e73f0f0815db5aa128780e1a974ba411c13de2addc555ba866bac1558370049afb6c0ff656592c80

    • SSDEEP

      49152:ec+mE815o/IC2jsB1A0wzpOnfwZU5BcumPqZSyavWO3ATPZro:e1mNXCXcp1qXavWOwbV

    Score
    8/10
    adwarediscoverypersistencespywarestealer

    • Registers COM server for autorun

      persistence

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks