Overview

overview

8

Static

static

LauncherFe...64.exe

windows7-x64

8

LauncherFe...64.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    LauncherFenix-Java-8u51-Windows-x64.exe

  • Size

    41.2MB

  • Sample

    230131-24mw1sag97

  • MD5

    b9919195f61824f980f4a088d7447a11

  • SHA1

    447fd1f59219282ec5d2f7a179ac12cc072171c3

  • SHA256

    3895872bc4cdfb7693c227a435cf6740f968e4fa6ce0f7449e6a074e3e3a0f01

  • SHA512

    d9f4e268531bd48f6b6aa4325024921bca30ebfff3ae6af5c069146a3fc401c411bdeceb306ba01fbf3bcdc48e39a367e78a1f355dc3dd5f1df75a0d585a10c6

  • SSDEEP

    786432:lIL77/mXteC+c78UZnibhhr7pYA/NSkv7JrpzUyHTrD0N6U1cNYGOtss:lK7gf3iLrNYrk1rpwyPD0N6vYGOtT

Score
8/10
adwarepersistencestealerupx

Malware Config

Targets

    • Target

      LauncherFenix-Java-8u51-Windows-x64.exe

    • Size

      41.2MB

    • MD5

      b9919195f61824f980f4a088d7447a11

    • SHA1

      447fd1f59219282ec5d2f7a179ac12cc072171c3

    • SHA256

      3895872bc4cdfb7693c227a435cf6740f968e4fa6ce0f7449e6a074e3e3a0f01

    • SHA512

      d9f4e268531bd48f6b6aa4325024921bca30ebfff3ae6af5c069146a3fc401c411bdeceb306ba01fbf3bcdc48e39a367e78a1f355dc3dd5f1df75a0d585a10c6

    • SSDEEP

      786432:lIL77/mXteC+c78UZnibhhr7pYA/NSkv7JrpzUyHTrD0N6U1cNYGOtss:lK7gf3iLrNYrk1rpwyPD0N6vYGOtT

    Score
    8/10
    adwarepersistencestealerupx

    • Blocklisted process makes network request

    • Executes dropped EXE

    • Registers COM server for autorun

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks