Overview

overview

8

Static

static

f73ca1f660...a9.exe

windows7-x64

8

f73ca1f660...a9.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f73ca1f6605d938ddd8576c78ffa87520088f62cef0d33bee2309e510c43f0a9

  • Size

    3.6MB

  • Sample

    221127-rxf5sahg4z

  • MD5

    d9709e07bad3a51f74e405e7d205930e

  • SHA1

    091e27f7b611d782fdca13fe4d596053b1a06d58

  • SHA256

    f73ca1f6605d938ddd8576c78ffa87520088f62cef0d33bee2309e510c43f0a9

  • SHA512

    f3ba5333d9c76495d821ada26cb06688b227b01c9d0e26ad3ad32394403c308054de182402ccb3a6945478c67426d952c23a7875f8e7c6dc6463479c26770809

  • SSDEEP

    49152:4c+vtjC4APehCOB8GznyXAsxzdmHsa4Oi2+Ua4/4EMFvBIPDIEdOMktcsA:lCNdAPiB8Hvxzisa4SPF/kkEEd

Score
8/10
adwarediscoverypersistencespywarestealer

Malware Config

Targets

    • Target

      f73ca1f6605d938ddd8576c78ffa87520088f62cef0d33bee2309e510c43f0a9

    • Size

      3.6MB

    • MD5

      d9709e07bad3a51f74e405e7d205930e

    • SHA1

      091e27f7b611d782fdca13fe4d596053b1a06d58

    • SHA256

      f73ca1f6605d938ddd8576c78ffa87520088f62cef0d33bee2309e510c43f0a9

    • SHA512

      f3ba5333d9c76495d821ada26cb06688b227b01c9d0e26ad3ad32394403c308054de182402ccb3a6945478c67426d952c23a7875f8e7c6dc6463479c26770809

    • SSDEEP

      49152:4c+vtjC4APehCOB8GznyXAsxzdmHsa4Oi2+Ua4/4EMFvBIPDIEdOMktcsA:lCNdAPiB8Hvxzisa4SPF/kkEEd

    Score
    8/10
    adwarediscoverypersistencespywarestealer

    • Registers COM server for autorun

      persistence

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks