Overview

overview

9

Static

static

70cc0bf130...d1.exe

windows7-x64

9

70cc0bf130...d1.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    70cc0bf130e781139dff1702e0f4ea242f585f9505d1a82e4406d146f2efecd1

  • Size

    250KB

  • Sample

    221202-w3prbsbh93

  • MD5

    557a594e9bfb7b411f65db3ef3bbb206

  • SHA1

    fb83fa88052ff2a82362ca85d09956532f9aab9b

  • SHA256

    70cc0bf130e781139dff1702e0f4ea242f585f9505d1a82e4406d146f2efecd1

  • SHA512

    3534088641f07753d8c09f1318d32e18be4794d9b56c287cd8ec4b16ac1dea6f2d18d999ccdcc2ca523cb953dba4dbd1e6bb35e0ffd2220e0024c004da5ef085

  • SSDEEP

    6144:h1OgDPdkBAFZWjadD4s5+nSj7Jp6RauPtP7P7qXY:h1OgLdaO+Sj90s430Y

Score
9/10
adwarediscoveryspywarestealerupx

Malware Config

Targets

    • Target

      70cc0bf130e781139dff1702e0f4ea242f585f9505d1a82e4406d146f2efecd1

    • Size

      250KB

    • MD5

      557a594e9bfb7b411f65db3ef3bbb206

    • SHA1

      fb83fa88052ff2a82362ca85d09956532f9aab9b

    • SHA256

      70cc0bf130e781139dff1702e0f4ea242f585f9505d1a82e4406d146f2efecd1

    • SHA512

      3534088641f07753d8c09f1318d32e18be4794d9b56c287cd8ec4b16ac1dea6f2d18d999ccdcc2ca523cb953dba4dbd1e6bb35e0ffd2220e0024c004da5ef085

    • SSDEEP

      6144:h1OgDPdkBAFZWjadD4s5+nSj7Jp6RauPtP7P7qXY:h1OgLdaO+Sj90s430Y

    Score
    9/10
    adwarediscoveryspywarestealerupx

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks