Overview

overview

8

Static

static

da461d9eb4...ce.exe

windows7-x64

8

da461d9eb4...ce.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    da461d9eb49cf8bcefb6dd29324456048ed07f8e57d5065a585e1951e0d93fce

  • Size

    250KB

  • Sample

    221202-bsq67aab88

  • MD5

    1de7256def0d76ea690c1167cb9b306d

  • SHA1

    2237f0da2e1a258049203623f968cfd4e71fba80

  • SHA256

    da461d9eb49cf8bcefb6dd29324456048ed07f8e57d5065a585e1951e0d93fce

  • SHA512

    18dd8a2093baae12405822f29afd98bed951dffb12ed22f3e74c9dcb3cd1fc72b1e233384f771a3b6dc23d2bfafda82f175c84370c0408715327f1faf9b38278

  • SSDEEP

    6144:h1OgDPdkBAFZWjadD4s5LKBkJJDeKaHoSfxZwzaJbL:h1OgLdaOL3rDS3wO

Score
8/10
adwarediscoveryspywarestealer

Malware Config

Targets

    • Target

      da461d9eb49cf8bcefb6dd29324456048ed07f8e57d5065a585e1951e0d93fce

    • Size

      250KB

    • MD5

      1de7256def0d76ea690c1167cb9b306d

    • SHA1

      2237f0da2e1a258049203623f968cfd4e71fba80

    • SHA256

      da461d9eb49cf8bcefb6dd29324456048ed07f8e57d5065a585e1951e0d93fce

    • SHA512

      18dd8a2093baae12405822f29afd98bed951dffb12ed22f3e74c9dcb3cd1fc72b1e233384f771a3b6dc23d2bfafda82f175c84370c0408715327f1faf9b38278

    • SSDEEP

      6144:h1OgDPdkBAFZWjadD4s5LKBkJJDeKaHoSfxZwzaJbL:h1OgLdaOL3rDS3wO

    Score
    8/10
    adwarediscoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks