Overview

overview

8

Static

static

7ca23d4f18...8a.exe

windows7-x64

8

7ca23d4f18...8a.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7ca23d4f1826c67b58ab6137980dfb8d5392a512ce8b3dffbdcbcc749933bb8a

  • Size

    3.8MB

  • Sample

    221125-jflpyaeg9z

  • MD5

    0cd3f475c34c556a0973604f4ebe948a

  • SHA1

    96e69b197000bd5d053ab81a222c7f3477428768

  • SHA256

    7ca23d4f1826c67b58ab6137980dfb8d5392a512ce8b3dffbdcbcc749933bb8a

  • SHA512

    9949e6a1c68bd99af5bef6d1083eed7e9ee49c83a3d7effb9b816646cf8f963ffb009991d0723cb10b262047afb2a1a33fc5de3759d10d34bbf6c3617fc4a66a

  • SSDEEP

    49152:vTPrJM4KMnQJT3QK9q3krGbJeJWNYQi8Xgcx1licbchaQAtIdvWzX5fIHMA1W:Dd9nOcVdbJ9YT8lDlicbchaBt5zpfa

Score
8/10
adwarediscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      7ca23d4f1826c67b58ab6137980dfb8d5392a512ce8b3dffbdcbcc749933bb8a

    • Size

      3.8MB

    • MD5

      0cd3f475c34c556a0973604f4ebe948a

    • SHA1

      96e69b197000bd5d053ab81a222c7f3477428768

    • SHA256

      7ca23d4f1826c67b58ab6137980dfb8d5392a512ce8b3dffbdcbcc749933bb8a

    • SHA512

      9949e6a1c68bd99af5bef6d1083eed7e9ee49c83a3d7effb9b816646cf8f963ffb009991d0723cb10b262047afb2a1a33fc5de3759d10d34bbf6c3617fc4a66a

    • SSDEEP

      49152:vTPrJM4KMnQJT3QK9q3krGbJeJWNYQi8Xgcx1licbchaQAtIdvWzX5fIHMA1W:Dd9nOcVdbJ9YT8lDlicbchaBt5zpfa

    Score
    8/10
    adwarediscoverypersistencespywarestealer

    • Registers COM server for autorun

      persistence

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks