Overview

overview

8

Static

static

51e7a95224...d6.exe

windows7-x64

8

51e7a95224...d6.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    51e7a952244bfb2e3f9dcddbedcebf46271317fc0bc0b140ab78bb3bd99db4d6

  • Size

    2.5MB

  • Sample

    221125-bzcmdacd75

  • MD5

    354c9d995ff693e80989e1e0e5fb4ada

  • SHA1

    b6d957a7be83178c5fc820403ea0260be68db5da

  • SHA256

    51e7a952244bfb2e3f9dcddbedcebf46271317fc0bc0b140ab78bb3bd99db4d6

  • SHA512

    2a23d658c10eb77174eb5ca42424111f3c6f7b4ab9d9cbf56cd125552076325a68d0cd99a9836cac11809d5629c6bc6a49feeb6ab304be0215d1f446a1e8a278

  • SSDEEP

    49152:h1Osj+QK3xQpjajXKioFMpYphqd3ArqvFUmEaDxEAxh4UR9TEI:h1ODQCjbKioVg3ArKh40V

Score
8/10
adwarediscoveryspywarestealer

Malware Config

Targets

    • Target

      51e7a952244bfb2e3f9dcddbedcebf46271317fc0bc0b140ab78bb3bd99db4d6

    • Size

      2.5MB

    • MD5

      354c9d995ff693e80989e1e0e5fb4ada

    • SHA1

      b6d957a7be83178c5fc820403ea0260be68db5da

    • SHA256

      51e7a952244bfb2e3f9dcddbedcebf46271317fc0bc0b140ab78bb3bd99db4d6

    • SHA512

      2a23d658c10eb77174eb5ca42424111f3c6f7b4ab9d9cbf56cd125552076325a68d0cd99a9836cac11809d5629c6bc6a49feeb6ab304be0215d1f446a1e8a278

    • SSDEEP

      49152:h1Osj+QK3xQpjajXKioFMpYphqd3ArqvFUmEaDxEAxh4UR9TEI:h1ODQCjbKioVg3ArKh40V

    Score
    8/10
    adwarediscoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Browser Extensions

1
T1176

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks