Overview

overview

8

Static

static

c69a12e1e6...36.exe

windows7-x64

8

c69a12e1e6...36.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    c69a12e1e6dec057b41b2535134f38942e3ae74b5a5dd6012abd7285626cea36

  • Size

    4.1MB

  • Sample

    221202-v2kkjscg6w

  • MD5

    1c29d769144bb2d92b3b1b25a320db88

  • SHA1

    1a03ba2422360a21efe6b5918bbe127cf127876b

  • SHA256

    c69a12e1e6dec057b41b2535134f38942e3ae74b5a5dd6012abd7285626cea36

  • SHA512

    2cb83e5b66b7aa9dd16c8fcb0e47ac65362e60f17f490038c8518c93ce9c3ba4a70498976f969fbad98df7c701e8c002f1ea30000928c5c01c980b8d0bf196d7

  • SSDEEP

    98304:eMwtta3zXlWk/bZtpNB+9z0f8g4TANmDZjkqygXQZxb:2tAzXl5HLw9gfD4skDZjkqyb

Score
8/10
adwarepersistencestealer

Malware Config

Targets

    • Target

      c69a12e1e6dec057b41b2535134f38942e3ae74b5a5dd6012abd7285626cea36

    • Size

      4.1MB

    • MD5

      1c29d769144bb2d92b3b1b25a320db88

    • SHA1

      1a03ba2422360a21efe6b5918bbe127cf127876b

    • SHA256

      c69a12e1e6dec057b41b2535134f38942e3ae74b5a5dd6012abd7285626cea36

    • SHA512

      2cb83e5b66b7aa9dd16c8fcb0e47ac65362e60f17f490038c8518c93ce9c3ba4a70498976f969fbad98df7c701e8c002f1ea30000928c5c01c980b8d0bf196d7

    • SSDEEP

      98304:eMwtta3zXlWk/bZtpNB+9z0f8g4TANmDZjkqygXQZxb:2tAzXl5HLw9gfD4skDZjkqyb

    Score
    8/10
    adwarepersistencestealer

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks