Overview

overview

8

Static

static

faafda23cd...08.exe

windows7-x64

8

faafda23cd...08.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    faafda23cd139013f102ee80549d3b09a6f0fe6e87816eaa094dfadb36bb0708

  • Size

    250KB

  • Sample

    221129-nk69nagh9w

  • MD5

    d0bab7dc40bae7f38006ab6261cb6df0

  • SHA1

    c7b58f98697b63ece0144248e528893115fa7640

  • SHA256

    faafda23cd139013f102ee80549d3b09a6f0fe6e87816eaa094dfadb36bb0708

  • SHA512

    30faa945cd449036444e2e74315d1c830b85757a594e453222e4ce4dae64c5c040e8a065e576fc87ca590365b51b4c41d1f3e139b156ff67ed9edb6c0dad72ee

  • SSDEEP

    6144:h1OgDPdkBAFZWjadD4s5mYb1TCcMbnFa414q/fO:h1OgLdaOmYb1TJMbnF422

Score
8/10
adwarediscoveryspywarestealer

Malware Config

Targets

    • Target

      faafda23cd139013f102ee80549d3b09a6f0fe6e87816eaa094dfadb36bb0708

    • Size

      250KB

    • MD5

      d0bab7dc40bae7f38006ab6261cb6df0

    • SHA1

      c7b58f98697b63ece0144248e528893115fa7640

    • SHA256

      faafda23cd139013f102ee80549d3b09a6f0fe6e87816eaa094dfadb36bb0708

    • SHA512

      30faa945cd449036444e2e74315d1c830b85757a594e453222e4ce4dae64c5c040e8a065e576fc87ca590365b51b4c41d1f3e139b156ff67ed9edb6c0dad72ee

    • SSDEEP

      6144:h1OgDPdkBAFZWjadD4s5mYb1TCcMbnFa414q/fO:h1OgLdaOmYb1TJMbnF422

    Score
    8/10
    adwarediscoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks