Overview

overview

8

Static

static

5937b3abf8...be.exe

windows7-x64

8

5937b3abf8...be.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    5937b3abf88b5b7d876e87d449e70092ffd446330e0b052f4b27ba350b14bbbe

  • Size

    252KB

  • Sample

    221201-h5sdcafb45

  • MD5

    91eaf010bcca4c5d129ff4bba070af9e

  • SHA1

    95ce34ed338c12745cbdbd912e5395c8ef0cc3c7

  • SHA256

    5937b3abf88b5b7d876e87d449e70092ffd446330e0b052f4b27ba350b14bbbe

  • SHA512

    f5def8d002c84ea64634ca9bd7e12d713b7e027bcaa1a939d93e248dc551327c9a76113ad91526ef4f36c6bd1705f4f96e2626aea509bbfb97d4ac60776f264c

  • SSDEEP

    6144:h1OgDPdkBAFZWjadD4s5NPLQdHT0SqqQGIs/WYAVNF2pG:h1OgLdaONPUdH4SuwWYAVB

Score
8/10
adwarediscoveryspywarestealer

Malware Config

Targets

    • Target

      5937b3abf88b5b7d876e87d449e70092ffd446330e0b052f4b27ba350b14bbbe

    • Size

      252KB

    • MD5

      91eaf010bcca4c5d129ff4bba070af9e

    • SHA1

      95ce34ed338c12745cbdbd912e5395c8ef0cc3c7

    • SHA256

      5937b3abf88b5b7d876e87d449e70092ffd446330e0b052f4b27ba350b14bbbe

    • SHA512

      f5def8d002c84ea64634ca9bd7e12d713b7e027bcaa1a939d93e248dc551327c9a76113ad91526ef4f36c6bd1705f4f96e2626aea509bbfb97d4ac60776f264c

    • SSDEEP

      6144:h1OgDPdkBAFZWjadD4s5NPLQdHT0SqqQGIs/WYAVNF2pG:h1OgLdaONPUdH4SuwWYAVB

    Score
    8/10
    adwarediscoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks