Overview

overview

8

Static

static

1

C/ProgramD...ff.exe

windows7-x64

8

C/ProgramD...ff.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d0665e370b2871a328ec8bcf86ade816e696d411430ff6586cf8e3dad1be20ff.zip

  • Size

    8.6MB

  • Sample

    230213-yzrsmafc9y

  • MD5

    47101d92471c2ff9020a5bee6077dbef

  • SHA1

    22c37a3b382463c7c9fc2f13c4dfddaee91ce396

  • SHA256

    3100df1e18aa8f950adcf695d09070141f1e64c3da5a960e0308976ecdd29819

  • SHA512

    ee1ee6b638c61982ed21d6cefef42d713ce09b85218d79eda15021de289ef1274f0a5ca891ade5c0949d5c2eb99bc569629b56571c887d5ef7c24d7874e3cb70

  • SSDEEP

    196608:hGjpLljb0QfAY00+NyMWsZXfa3BX0pPknVIq+HcpfTAnwXO0:hWpBjoY+NyQXfax0psnVIq++TQwXO0

Score
8/10
discoverypersistencespywarestealer

Malware Config

Targets

    • Target

      C/ProgramData/Sentinel/AFUCache/d0665e370b2871a328ec8bcf86ade816e696d411430ff6586cf8e3dad1be20ff

    • Size

      9.3MB

    • MD5

      59501f98b000a7bb713950310fabf73b

    • SHA1

      0872ab73aa1edde06224a59b9e5f8e8db6418833

    • SHA256

      d0665e370b2871a328ec8bcf86ade816e696d411430ff6586cf8e3dad1be20ff

    • SHA512

      0ba73c470e3e6a859ca92444c9e4ff1dedfb39347385f8e28ca6a94fca304daa4dd1c49049af7748fea07e6fca755ac6fb75bfb408588e26e97c897a34f98b02

    • SSDEEP

      196608:3yWDJp+GJ4FRT3qboM/PzujcKGJDKulb/hz8JQ8QnFDRfHVB7c:3yI2GJ4S/CjcXeyfnfVB7c

    Score
    8/10
    discoverypersistencespywarestealer

    • Drops file in Drivers directory

    • Registers new Print Monitor

      persistence

    • Sets service image path in registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks