Overview

overview

7

Static

static

1

5be898097e...7b.exe

windows7-x64

7

5be898097e...7b.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    5be898097e66465ba2a0a08289204a8e9b40f1d41de5b07d706de61b3ab82f7b

  • Size

    191KB

  • Sample

    221205-whfb6acb23

  • MD5

    6e74182a497388c924c8884b8eff50ba

  • SHA1

    2e41bd759f1c43f93c5805bb4b93d90bf3599ee1

  • SHA256

    5be898097e66465ba2a0a08289204a8e9b40f1d41de5b07d706de61b3ab82f7b

  • SHA512

    76587b23bfab7e79ed2d93fc41f4b7b93d3565a40a9bc24defa8ddf57b9035e5a622ee901a8a3b6d1a0f094a1fe83349e9a490b56d71af349617d9bb7182d443

  • SSDEEP

    3072:HNyah0mJBN0ym27mpVJrEZhELLf7W95w19a1/rH5TNV0MzojfDI:HwK0ym/JrahELf7W9y3a1/r9JSbI

Score
7/10
adwarediscoverypersistencestealer

Malware Config

Targets

    • Target

      5be898097e66465ba2a0a08289204a8e9b40f1d41de5b07d706de61b3ab82f7b

    • Size

      191KB

    • MD5

      6e74182a497388c924c8884b8eff50ba

    • SHA1

      2e41bd759f1c43f93c5805bb4b93d90bf3599ee1

    • SHA256

      5be898097e66465ba2a0a08289204a8e9b40f1d41de5b07d706de61b3ab82f7b

    • SHA512

      76587b23bfab7e79ed2d93fc41f4b7b93d3565a40a9bc24defa8ddf57b9035e5a622ee901a8a3b6d1a0f094a1fe83349e9a490b56d71af349617d9bb7182d443

    • SSDEEP

      3072:HNyah0mJBN0ym27mpVJrEZhELLf7W95w19a1/rH5TNV0MzojfDI:HwK0ym/JrahELf7W9y3a1/r9JSbI

    Score
    7/10
    adwarediscoverypersistencestealer

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks