Overview

overview

8

Static

static

4d97edb5d7...2e.exe

windows7-x64

8

4d97edb5d7...2e.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4d97edb5d7edf1855f264f7cc4302744c0de909b9c097be1dba569fc86a2882e

  • Size

    4.4MB

  • Sample

    221125-b665kaga2z

  • MD5

    7b4e688e0d3ef1452dfc250cdf1f097c

  • SHA1

    c0d071a995427912099616f8aecf971c58eb58da

  • SHA256

    4d97edb5d7edf1855f264f7cc4302744c0de909b9c097be1dba569fc86a2882e

  • SHA512

    21ad0f9363066494abccf0321db07a5f54e5ae004b82028cba42df9cba807c9339bf6240f10cbe85cd241d6f86e7974aa84628bd5bd6d59e9284091c7455ecc5

  • SSDEEP

    49152:dXk098aJQu5Bq6fmxup49dGKvghxfki10a9buOBqFoyoC3yE/Ac5mWxnmyy:XmaJrM6PKc9buOBqFXoWNAxenF

Score
8/10
adwarediscoverypersistencestealer

Malware Config

Targets

    • Target

      4d97edb5d7edf1855f264f7cc4302744c0de909b9c097be1dba569fc86a2882e

    • Size

      4.4MB

    • MD5

      7b4e688e0d3ef1452dfc250cdf1f097c

    • SHA1

      c0d071a995427912099616f8aecf971c58eb58da

    • SHA256

      4d97edb5d7edf1855f264f7cc4302744c0de909b9c097be1dba569fc86a2882e

    • SHA512

      21ad0f9363066494abccf0321db07a5f54e5ae004b82028cba42df9cba807c9339bf6240f10cbe85cd241d6f86e7974aa84628bd5bd6d59e9284091c7455ecc5

    • SSDEEP

      49152:dXk098aJQu5Bq6fmxup49dGKvghxfki10a9buOBqFoyoC3yE/Ac5mWxnmyy:XmaJrM6PKc9buOBqFXoWNAxenF

    Score
    8/10
    adwarediscoverypersistencestealer

    • Registers COM server for autorun

      persistence

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Browser Extensions

1
T1176

Privilege Escalation

Defense Evasion

Modify Registry

3
T1112

Credential Access

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks