Overview

overview

8

Static

static

20d3e912b3...37.exe

windows7-x64

8

20d3e912b3...37.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    20d3e912b36da38310a075aa6d3d49e76c34996b1d9a04c7ff54d9b42c800937

  • Size

    3.6MB

  • Sample

    221125-j4nt7sge5y

  • MD5

    e4f94a0fb3f446fa349323ff5318c318

  • SHA1

    d877b71e6985df6d48fbe665e394ea53421fe38a

  • SHA256

    20d3e912b36da38310a075aa6d3d49e76c34996b1d9a04c7ff54d9b42c800937

  • SHA512

    019522dab7249a7c4db939fc01baade4c7e0bdd91371a4d0a1aecd449c5258c1590df51d5ff10ba833d49735596cb42723ff57f043c4c7c25214eaa2b721135a

  • SSDEEP

    49152:Z8uYttSt/1TwCbvuWvdW2exJESRAyAytwlREfTxMSbOo78pf:WAOCXW2oZRAyAytwvEfpOoY

Score
8/10
adwarediscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      20d3e912b36da38310a075aa6d3d49e76c34996b1d9a04c7ff54d9b42c800937

    • Size

      3.6MB

    • MD5

      e4f94a0fb3f446fa349323ff5318c318

    • SHA1

      d877b71e6985df6d48fbe665e394ea53421fe38a

    • SHA256

      20d3e912b36da38310a075aa6d3d49e76c34996b1d9a04c7ff54d9b42c800937

    • SHA512

      019522dab7249a7c4db939fc01baade4c7e0bdd91371a4d0a1aecd449c5258c1590df51d5ff10ba833d49735596cb42723ff57f043c4c7c25214eaa2b721135a

    • SSDEEP

      49152:Z8uYttSt/1TwCbvuWvdW2exJESRAyAytwlREfTxMSbOo78pf:WAOCXW2oZRAyAytwvEfpOoY

    Score
    8/10
    adwarediscoverypersistencespywarestealer

    • Registers COM server for autorun

      persistence

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks