Overview

overview

9

Static

static

1554cf59a9...ad.exe

windows7-x64

9

1554cf59a9...ad.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    1554cf59a9b7e02fc77f5bb808804addbbebec756a928c697639d2f2475081ad

  • Size

    249KB

  • Sample

    221202-bwt29aae55

  • MD5

    5caed661c6909e178300c8861d1302cb

  • SHA1

    3ce63aecbc022fba0993b4d38b79ac290f1a6dda

  • SHA256

    1554cf59a9b7e02fc77f5bb808804addbbebec756a928c697639d2f2475081ad

  • SHA512

    757b4532c53afe8be720260f340f8aa9ddece86e0581263d7f2d658639e661d4ee066982152cfbc0cac18824b78a8a3ea74dcbcc8a3938ba2b4bd3ef5dad28ef

  • SSDEEP

    3072:hn1/uEAgDPdkBlyFZ+ScjaiKWbETBquAEXlqsUU9TLvXC+LxbIwmdiQEWMAVeuzA:h1OgDPdkBAFZWjadD4s5xLvXC+LKvMj

Score
9/10
adwarediscoveryspywarestealerupx

Malware Config

Targets

    • Target

      1554cf59a9b7e02fc77f5bb808804addbbebec756a928c697639d2f2475081ad

    • Size

      249KB

    • MD5

      5caed661c6909e178300c8861d1302cb

    • SHA1

      3ce63aecbc022fba0993b4d38b79ac290f1a6dda

    • SHA256

      1554cf59a9b7e02fc77f5bb808804addbbebec756a928c697639d2f2475081ad

    • SHA512

      757b4532c53afe8be720260f340f8aa9ddece86e0581263d7f2d658639e661d4ee066982152cfbc0cac18824b78a8a3ea74dcbcc8a3938ba2b4bd3ef5dad28ef

    • SSDEEP

      3072:hn1/uEAgDPdkBlyFZ+ScjaiKWbETBquAEXlqsUU9TLvXC+LxbIwmdiQEWMAVeuzA:h1OgDPdkBAFZWjadD4s5xLvXC+LKvMj

    Score
    9/10
    adwarediscoveryspywarestealerupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks