Overview

overview

8

Static

static

ChromeSetup.exe

windows7-x64

8

ChromeSetup.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    ChromeSetup.exe

  • Size

    1.4MB

  • Sample

    230106-cn5dpaea53

  • MD5

    94a9c2d6ea5b0a4bef00de6058dc489a

  • SHA1

    884f3415f5a4258497e7f12ea03198ecbf0bb6a1

  • SHA256

    4fd455709417b4d400bdb76b007008445df54fed4ee6cbe67c83ac12e5f34a74

  • SHA512

    e10ea3c1a8d249a50c7a72b724950a46f3ad7137b1c5d28cd0b94405131f37f35f2ab60a496fe627a3e0ee1a40896aa61952f759670b58d0ac9717f45c18c154

  • SSDEEP

    24576:Jw8KjKjGFygcc23L1/NVOmOSGb6E3ecS4fzrjxJh9UZXlpbPvC7xtYUrEmFlo+LT:PKjKWQc2b1FVgbjrjxPe1pbPSQm1FloS

Score
8/10
discoveryevasionpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      ChromeSetup.exe

    • Size

      1.4MB

    • MD5

      94a9c2d6ea5b0a4bef00de6058dc489a

    • SHA1

      884f3415f5a4258497e7f12ea03198ecbf0bb6a1

    • SHA256

      4fd455709417b4d400bdb76b007008445df54fed4ee6cbe67c83ac12e5f34a74

    • SHA512

      e10ea3c1a8d249a50c7a72b724950a46f3ad7137b1c5d28cd0b94405131f37f35f2ab60a496fe627a3e0ee1a40896aa61952f759670b58d0ac9717f45c18c154

    • SSDEEP

      24576:Jw8KjKjGFygcc23L1/NVOmOSGb6E3ecS4fzrjxJh9UZXlpbPvC7xtYUrEmFlo+LT:PKjKWQc2b1FVgbjrjxPe1pbPSQm1FloS

    Score
    8/10
    discoveryevasionpersistencespywarestealertrojan

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Modifies Installed Components in the registry

      persistence

    • Registers COM server for autorun

      persistence

    • Sets file execution options in registry

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Checks whether UAC is enabled

      evasiontrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks