Overview

overview

8

Static

static

230a364af3...63.exe

windows7-x64

8

230a364af3...63.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    230a364af3f10315840161ba31b85b70a0d2aa8f3dd1659d2c28e8bb65ec6c63

  • Size

    2.1MB

  • Sample

    221125-y4jmtacf86

  • MD5

    8a1ffccf88063e273deeda6f1047a47b

  • SHA1

    9d31968b76b9d422dc4f89d0539b3e1f914f2665

  • SHA256

    230a364af3f10315840161ba31b85b70a0d2aa8f3dd1659d2c28e8bb65ec6c63

  • SHA512

    32ea1445d15e9284fd35eb2b83a84d8c6490d46b2c94c63d9a3545a37b8bb8167ed785e2d86f346e49fad3c84f36e5eaff83477c1ce266ac211e933ba801e1c0

  • SSDEEP

    49152:h1OssNB2tcyUoc3slSeZrg1JclQ35sFDRe:h1OF36Eoc3UK0bc

Score
8/10
adwarediscoveryspywarestealer

Malware Config

Targets

    • Target

      230a364af3f10315840161ba31b85b70a0d2aa8f3dd1659d2c28e8bb65ec6c63

    • Size

      2.1MB

    • MD5

      8a1ffccf88063e273deeda6f1047a47b

    • SHA1

      9d31968b76b9d422dc4f89d0539b3e1f914f2665

    • SHA256

      230a364af3f10315840161ba31b85b70a0d2aa8f3dd1659d2c28e8bb65ec6c63

    • SHA512

      32ea1445d15e9284fd35eb2b83a84d8c6490d46b2c94c63d9a3545a37b8bb8167ed785e2d86f346e49fad3c84f36e5eaff83477c1ce266ac211e933ba801e1c0

    • SSDEEP

      49152:h1OssNB2tcyUoc3slSeZrg1JclQ35sFDRe:h1OF36Eoc3UK0bc

    Score
    8/10
    adwarediscoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks