Overview

overview

8

Static

static

a859bcef82...ea.exe

windows7-x64

8

a859bcef82...ea.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    a859bcef82f297d1a42c5f35bd6e1a520815a58e8220ef92b3bbc44e805e73ea

  • Size

    257KB

  • Sample

    221129-nr6lpshe51

  • MD5

    a4e34ca0e8c59503cdab4e39adb58f55

  • SHA1

    c6023096401925db6d17354e67a7e96924b84635

  • SHA256

    a859bcef82f297d1a42c5f35bd6e1a520815a58e8220ef92b3bbc44e805e73ea

  • SHA512

    7b89b62bfba5233850ba666e4d952e65d58dfff49378ace90234e1d85e21266e11f920a7346c21381f7c4e4003a1904c6b8322c80e1726efbcfcfecbbaea1a66

  • SSDEEP

    3072:9n1/uEAgDPdkBlyFZ+ScjaiKWbETBquAEXlqsWFKqcUm8l0vV6BK7bsh4K5HyBoN:91OgDPdkBAFZWjadD4sf5eb4KFP9c8

Score
8/10
adwarediscoveryspywarestealer

Malware Config

Targets

    • Target

      a859bcef82f297d1a42c5f35bd6e1a520815a58e8220ef92b3bbc44e805e73ea

    • Size

      257KB

    • MD5

      a4e34ca0e8c59503cdab4e39adb58f55

    • SHA1

      c6023096401925db6d17354e67a7e96924b84635

    • SHA256

      a859bcef82f297d1a42c5f35bd6e1a520815a58e8220ef92b3bbc44e805e73ea

    • SHA512

      7b89b62bfba5233850ba666e4d952e65d58dfff49378ace90234e1d85e21266e11f920a7346c21381f7c4e4003a1904c6b8322c80e1726efbcfcfecbbaea1a66

    • SSDEEP

      3072:9n1/uEAgDPdkBlyFZ+ScjaiKWbETBquAEXlqsWFKqcUm8l0vV6BK7bsh4K5HyBoN:91OgDPdkBAFZWjadD4sf5eb4KFP9c8

    Score
    8/10
    adwarediscoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks