Overview

overview

7

Static

static

29d7011a9b...29.exe

windows7-x64

7

29d7011a9b...29.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    29d7011a9bbe72a3e3f49bfe591f5397a6464a311bf4fe1c16756893eff3b929

  • Size

    125KB

  • Sample

    221127-2yadqsaf5v

  • MD5

    3eb973cbc9b8a6f9fb340258a6a036ee

  • SHA1

    e0d2581ccfe684a55698e499f0b45e2f809f0f09

  • SHA256

    29d7011a9bbe72a3e3f49bfe591f5397a6464a311bf4fe1c16756893eff3b929

  • SHA512

    c6d2569ce7b33f40145b4cb768f86ee6582c0d55a7ac3e330d10a9b13d9f917532f35f6a278c6bd18b7efcdd534c54ed3df79f3dfa25839102d88824f4b3eb35

  • SSDEEP

    3072:EmeDmBqskJEwX8oAV+3Fn94ZDH76CJBOW5+cSbY9G:E8q6+3FSDuA+/

Score
7/10
adwarediscoverystealer

Malware Config

Targets

    • Target

      29d7011a9bbe72a3e3f49bfe591f5397a6464a311bf4fe1c16756893eff3b929

    • Size

      125KB

    • MD5

      3eb973cbc9b8a6f9fb340258a6a036ee

    • SHA1

      e0d2581ccfe684a55698e499f0b45e2f809f0f09

    • SHA256

      29d7011a9bbe72a3e3f49bfe591f5397a6464a311bf4fe1c16756893eff3b929

    • SHA512

      c6d2569ce7b33f40145b4cb768f86ee6582c0d55a7ac3e330d10a9b13d9f917532f35f6a278c6bd18b7efcdd534c54ed3df79f3dfa25839102d88824f4b3eb35

    • SSDEEP

      3072:EmeDmBqskJEwX8oAV+3Fn94ZDH76CJBOW5+cSbY9G:E8q6+3FSDuA+/

    Score
    7/10
    adwarediscoverystealer

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Browser Extensions

1
T1176

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks