Overview

overview

8

Static

static

fbd0cdce92...e7.exe

windows7-x64

8

fbd0cdce92...e7.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fbd0cdce921e48f865c331e8b4c31a86c1d821c6ed5ae90388fbde1a814c2be7

  • Size

    245KB

  • Sample

    221201-h1ragseg46

  • MD5

    8bd91dfec33ef58a4b94ec9a774ee516

  • SHA1

    878f6dda74592be01f0df0bdcbb44fb1a5994b36

  • SHA256

    fbd0cdce921e48f865c331e8b4c31a86c1d821c6ed5ae90388fbde1a814c2be7

  • SHA512

    c7b570a5f23e43e86ffe7d2ed3fe4db509867bf598daff120422986c09d98205bbcb6a79651f2e7bb09c34237e25605b1d16130ae49ffcc3bb7c46e00a57f9bc

  • SSDEEP

    6144:h1OgDPdkBAFZWjadD4s5/59CJexpbK2ZmsuYN031b:h1OgLdaO/5xeYS31b

Score
8/10
adwarediscoveryspywarestealer

Malware Config

Targets

    • Target

      fbd0cdce921e48f865c331e8b4c31a86c1d821c6ed5ae90388fbde1a814c2be7

    • Size

      245KB

    • MD5

      8bd91dfec33ef58a4b94ec9a774ee516

    • SHA1

      878f6dda74592be01f0df0bdcbb44fb1a5994b36

    • SHA256

      fbd0cdce921e48f865c331e8b4c31a86c1d821c6ed5ae90388fbde1a814c2be7

    • SHA512

      c7b570a5f23e43e86ffe7d2ed3fe4db509867bf598daff120422986c09d98205bbcb6a79651f2e7bb09c34237e25605b1d16130ae49ffcc3bb7c46e00a57f9bc

    • SSDEEP

      6144:h1OgDPdkBAFZWjadD4s5/59CJexpbK2ZmsuYN031b:h1OgLdaO/5xeYS31b

    Score
    8/10
    adwarediscoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks