Overview

overview

8

Static

static

0771f8bd76...13.exe

windows7-x64

8

0771f8bd76...13.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0771f8bd761151daf134e100f3195db300668804cdd20ef482ffcd330f891e13

  • Size

    4.3MB

  • Sample

    221125-fzf21sdd49

  • MD5

    2cf14102f33b11bfd41ddb48a9b41ef6

  • SHA1

    1b4cb9e033d12049cb677bf768cc7a41e23b1c61

  • SHA256

    0771f8bd761151daf134e100f3195db300668804cdd20ef482ffcd330f891e13

  • SHA512

    bfa0914aa5f41446c4263041b38759c0033cfbb74e87760dfe9b5af0993e3f3e8a12652cef208ecbff0fff5ef231b47a3d2f53649b02f40adfb3adbe4c5ac718

  • SSDEEP

    49152:kiOqoTPI65XCI+armxup4ddGKvghxfki1o59buOBqFZZ8hpTQdCS:/2PI6whanKcYbuOBqFZZspsdC

Score
8/10
adwarediscoverypersistencestealer

Malware Config

Targets

    • Target

      0771f8bd761151daf134e100f3195db300668804cdd20ef482ffcd330f891e13

    • Size

      4.3MB

    • MD5

      2cf14102f33b11bfd41ddb48a9b41ef6

    • SHA1

      1b4cb9e033d12049cb677bf768cc7a41e23b1c61

    • SHA256

      0771f8bd761151daf134e100f3195db300668804cdd20ef482ffcd330f891e13

    • SHA512

      bfa0914aa5f41446c4263041b38759c0033cfbb74e87760dfe9b5af0993e3f3e8a12652cef208ecbff0fff5ef231b47a3d2f53649b02f40adfb3adbe4c5ac718

    • SSDEEP

      49152:kiOqoTPI65XCI+armxup4ddGKvghxfki1o59buOBqFZZ8hpTQdCS:/2PI6whanKcYbuOBqFZZspsdC

    Score
    8/10
    adwarediscoverypersistencestealer

    • Registers COM server for autorun

      persistence

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Browser Extensions

1
T1176

Privilege Escalation

Defense Evasion

Modify Registry

3
T1112

Credential Access

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks