Overview

overview

8

Static

static

262df9260b...aa.exe

windows7-x64

8

262df9260b...aa.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    262df9260b5bd63d6862efdead6a56bb89476ab9730233525d705e02d5a064aa

  • Size

    4.6MB

  • Sample

    221125-d9215ach3x

  • MD5

    82785805b50a6fdae1a07c7d15987180

  • SHA1

    4847916e5782f741535d98177f83fc767ca74652

  • SHA256

    262df9260b5bd63d6862efdead6a56bb89476ab9730233525d705e02d5a064aa

  • SHA512

    06744ac273fe99a7bea0ef3709afef074eaf376c1758f37f6059478a1e3e004da1fd1e6e6388e32607499b448599114325fd0049b8085ceb9c11822fd0b7a2bc

  • SSDEEP

    98304:kcNYTQWN2AY10jOcT/4Akx+YmZW9f+WcZV:DY4XAkxOPV

Score
8/10
adwarediscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      262df9260b5bd63d6862efdead6a56bb89476ab9730233525d705e02d5a064aa

    • Size

      4.6MB

    • MD5

      82785805b50a6fdae1a07c7d15987180

    • SHA1

      4847916e5782f741535d98177f83fc767ca74652

    • SHA256

      262df9260b5bd63d6862efdead6a56bb89476ab9730233525d705e02d5a064aa

    • SHA512

      06744ac273fe99a7bea0ef3709afef074eaf376c1758f37f6059478a1e3e004da1fd1e6e6388e32607499b448599114325fd0049b8085ceb9c11822fd0b7a2bc

    • SSDEEP

      98304:kcNYTQWN2AY10jOcT/4Akx+YmZW9f+WcZV:DY4XAkxOPV

    Score
    8/10
    adwarediscoverypersistencespywarestealer

    • Registers COM server for autorun

      persistence

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Browser Extensions

1
T1176

Privilege Escalation

Defense Evasion

Modify Registry

3
T1112

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks