Overview

overview

8

Static

static

9630f5d095...be.exe

windows7-x64

8

9630f5d095...be.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    9630f5d095410d3690c89e89ff3e2655d225b624a03526c360eb86ff0bf9e7be

  • Size

    2.0MB

  • Sample

    221205-n4hqeagc82

  • MD5

    56f6bedfcacea1304880616015de2f44

  • SHA1

    e6a438e0d7bdf892077b3713067b22c9b1b7a54a

  • SHA256

    9630f5d095410d3690c89e89ff3e2655d225b624a03526c360eb86ff0bf9e7be

  • SHA512

    43b7b51608ef2ad2067a1e5f5b80cc34ba5e2e94f23d220044e7de906f09faaa203ddb26c0588a1f619528b05c263055f6031afd9a71186947a983b40c68e027

  • SSDEEP

    49152:x342puDySYNkM8k1yNMO9y4FYUJhTvRG+DvtJn:xUeSYmw4DQ4q6hTvtvD

Score
8/10
adwarestealer

Malware Config

Targets

    • Target

      9630f5d095410d3690c89e89ff3e2655d225b624a03526c360eb86ff0bf9e7be

    • Size

      2.0MB

    • MD5

      56f6bedfcacea1304880616015de2f44

    • SHA1

      e6a438e0d7bdf892077b3713067b22c9b1b7a54a

    • SHA256

      9630f5d095410d3690c89e89ff3e2655d225b624a03526c360eb86ff0bf9e7be

    • SHA512

      43b7b51608ef2ad2067a1e5f5b80cc34ba5e2e94f23d220044e7de906f09faaa203ddb26c0588a1f619528b05c263055f6031afd9a71186947a983b40c68e027

    • SSDEEP

      49152:x342puDySYNkM8k1yNMO9y4FYUJhTvRG+DvtJn:xUeSYmw4DQ4q6hTvtvD

    Score
    8/10
    adwarestealer

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks