Overview

overview

8

Static

static

b3279aac2a...34.exe

windows7-x64

8

b3279aac2a...34.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b3279aac2aa84bb4e3dacd6a88bc859239822f9d0837c14f8b46d4db3e6ec034

  • Size

    496KB

  • Sample

    221202-ccc53aca56

  • MD5

    b2634ea84e731028bc15c126160786b7

  • SHA1

    30740cce94c0f7208776ee2b90aa1c6aeb130bd7

  • SHA256

    b3279aac2aa84bb4e3dacd6a88bc859239822f9d0837c14f8b46d4db3e6ec034

  • SHA512

    6316e1408a670c7d92566794f606f876393e2a94c7296ec2763207a6ac4211e81d1eeb451ead607b03165d6bcfa1b510b667b1bce5c3326d1b9b381c414f47ae

  • SSDEEP

    12288:91OgLdaPvBE5GR422TQM+bnYwiLsmjQWqSo46XSJP:91OYdaXSs422UJYTjQWdo/XSJP

Score
8/10
adwarediscoveryspywarestealer

Malware Config

Targets

    • Target

      b3279aac2aa84bb4e3dacd6a88bc859239822f9d0837c14f8b46d4db3e6ec034

    • Size

      496KB

    • MD5

      b2634ea84e731028bc15c126160786b7

    • SHA1

      30740cce94c0f7208776ee2b90aa1c6aeb130bd7

    • SHA256

      b3279aac2aa84bb4e3dacd6a88bc859239822f9d0837c14f8b46d4db3e6ec034

    • SHA512

      6316e1408a670c7d92566794f606f876393e2a94c7296ec2763207a6ac4211e81d1eeb451ead607b03165d6bcfa1b510b667b1bce5c3326d1b9b381c414f47ae

    • SSDEEP

      12288:91OgLdaPvBE5GR422TQM+bnYwiLsmjQWqSo46XSJP:91OYdaXSs422UJYTjQWdo/XSJP

    Score
    8/10
    adwarediscoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks