Overview

overview

10

Static

static

6351d591f8...37.exe

windows7-x64

10

6351d591f8...37.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    6351d591f86bbcd9ad40ecb04f3465b1c1b596af13217765750a97ae76c88537

  • Size

    2.4MB

  • Sample

    221206-t54l6ahb9z

  • MD5

    775093b88b7af664f938cce05a5310e2

  • SHA1

    108272b646817c2e34d8337a6d607551b3bab66d

  • SHA256

    6351d591f86bbcd9ad40ecb04f3465b1c1b596af13217765750a97ae76c88537

  • SHA512

    bfa501d497f9338bd14ea37e605425bfbf22649c1384e5170fdfeb438c057fc65151516713b6272821a1e05f1bac3ac2d740b653c72d7618e9f0f6e15d00b55f

  • SSDEEP

    3072:pT7gII4uL8ldMSU0Vvzt/uzhWtJaqejvc4RD:pT7XuLKdP8zhW7aqCrD

Score
10/10
evasionpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      6351d591f86bbcd9ad40ecb04f3465b1c1b596af13217765750a97ae76c88537

    • Size

      2.4MB

    • MD5

      775093b88b7af664f938cce05a5310e2

    • SHA1

      108272b646817c2e34d8337a6d607551b3bab66d

    • SHA256

      6351d591f86bbcd9ad40ecb04f3465b1c1b596af13217765750a97ae76c88537

    • SHA512

      bfa501d497f9338bd14ea37e605425bfbf22649c1384e5170fdfeb438c057fc65151516713b6272821a1e05f1bac3ac2d740b653c72d7618e9f0f6e15d00b55f

    • SSDEEP

      3072:pT7gII4uL8ldMSU0Vvzt/uzhWtJaqejvc4RD:pT7XuLKdP8zhW7aqCrD

    Score
    10/10
    evasionpersistencetrojanspywarestealer

    • UAC bypass

      evasiontrojan

    • Windows security bypass

      evasiontrojan

    • Disables RegEdit via registry modification

      evasion

    • Disables Task Manager via registry modification

      evasion

    • Executes dropped EXE

    • Modifies Installed Components in the registry

      persistence

    • Sets service image path in registry

      persistence

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Windows security modification

      evasiontrojan

    • Adds Run key to start application

      persistence

    • Checks whether UAC is enabled

      evasiontrojan

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks