Overview

overview

8

Static

static

1123d06e7d...d4.exe

windows7-x64

8

1123d06e7d...d4.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1123d06e7df967e583f20f2bb16a13c7cde0dfc5e57c99bbcc6fc2ea7923d7d4

  • Size

    4.2MB

  • Sample

    221125-fgv38acc87

  • MD5

    6123ea01da1697c935e5a4552c33f728

  • SHA1

    609f1cab5a7aa4d5530c010c2d9b7af169e8734d

  • SHA256

    1123d06e7df967e583f20f2bb16a13c7cde0dfc5e57c99bbcc6fc2ea7923d7d4

  • SHA512

    6d0821130491af87b4bc6d0643b41616576468337466dee2a916c7394833ad8435564f3fd3606d47e6694cde24e76c616bc43b17f9203b9620964d8bbca4d2ad

  • SSDEEP

    49152:E+HmRHHuFHnWnjMZVA0wyOOnfwZU5BcumHl9Q+G0ytgHvrZpZWO3ATPSkV:Emm0FW0pOBllvv1pZWOwbf

Score
8/10
adwarediscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      1123d06e7df967e583f20f2bb16a13c7cde0dfc5e57c99bbcc6fc2ea7923d7d4

    • Size

      4.2MB

    • MD5

      6123ea01da1697c935e5a4552c33f728

    • SHA1

      609f1cab5a7aa4d5530c010c2d9b7af169e8734d

    • SHA256

      1123d06e7df967e583f20f2bb16a13c7cde0dfc5e57c99bbcc6fc2ea7923d7d4

    • SHA512

      6d0821130491af87b4bc6d0643b41616576468337466dee2a916c7394833ad8435564f3fd3606d47e6694cde24e76c616bc43b17f9203b9620964d8bbca4d2ad

    • SSDEEP

      49152:E+HmRHHuFHnWnjMZVA0wyOOnfwZU5BcumHl9Q+G0ytgHvrZpZWO3ATPSkV:Emm0FW0pOBllvv1pZWOwbf

    Score
    8/10
    adwarediscoverypersistencespywarestealer

    • Registers COM server for autorun

      persistence

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks