Overview

overview

9

Static

static

434aabdfad...e3.exe

windows7-x64

9

434aabdfad...e3.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    434aabdfad156add7c0f3874e9f299d49a722106bd95811b31e2d6de406c03e3

  • Size

    249KB

  • Sample

    221201-h5t7yaaf2v

  • MD5

    ee77d395e9e278b47b54b941615e20b8

  • SHA1

    036b82b9ca5eef0638ca5c04327f8cde9d0a59af

  • SHA256

    434aabdfad156add7c0f3874e9f299d49a722106bd95811b31e2d6de406c03e3

  • SHA512

    b8f37b6f78cf556e4de279c80b55c9ce5de2c6cfc9d21d765b937d9dc4dfbf8ac01a4f1eca96a0cba09de80d887dffce2b9006a72ae70a63dfd13cb9f14697ff

  • SSDEEP

    6144:h1OgDPdkBAFZWjadD4s5GI5zgVVsL+0TYG:h1OgLdaO75F+0/

Score
9/10
adwarediscoveryspywarestealerupx

Malware Config

Targets

    • Target

      434aabdfad156add7c0f3874e9f299d49a722106bd95811b31e2d6de406c03e3

    • Size

      249KB

    • MD5

      ee77d395e9e278b47b54b941615e20b8

    • SHA1

      036b82b9ca5eef0638ca5c04327f8cde9d0a59af

    • SHA256

      434aabdfad156add7c0f3874e9f299d49a722106bd95811b31e2d6de406c03e3

    • SHA512

      b8f37b6f78cf556e4de279c80b55c9ce5de2c6cfc9d21d765b937d9dc4dfbf8ac01a4f1eca96a0cba09de80d887dffce2b9006a72ae70a63dfd13cb9f14697ff

    • SSDEEP

      6144:h1OgDPdkBAFZWjadD4s5GI5zgVVsL+0TYG:h1OgLdaO75F+0/

    Score
    9/10
    adwarediscoveryspywarestealerupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks