Overview

overview

7

Static

static

1

b0cd73895d...12.exe

windows7-x64

6

b0cd73895d...12.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b0cd73895d1b7abd9afde556464733feb46e5da3eaf5bc0b105b4fc15b726712

  • Size

    263KB

  • Sample

    230310-hgxyxsdf6v

  • MD5

    3c24e8c069a63db138fe582142baf01b

  • SHA1

    bc9a2f3542fe9fef211fe86973e227c3c98bd26b

  • SHA256

    b0cd73895d1b7abd9afde556464733feb46e5da3eaf5bc0b105b4fc15b726712

  • SHA512

    79f740b56ff4f252ede5226e34657c9ad81caf3fde1dde1ad904bea291b82660cc986b76fd15d6035316c2b714df46d3c692ae98a987f0a7041b11c6d6c8aa16

  • SSDEEP

    6144:FZuuObR8sVImcyYmDuDOJTv5PWo89GPTT7UuZt9FxhZwp:6V+mzjUOJb5PSyXUuDHqp

Score
7/10
adwarepersistencestealer

Malware Config

Targets

    • Target

      b0cd73895d1b7abd9afde556464733feb46e5da3eaf5bc0b105b4fc15b726712

    • Size

      263KB

    • MD5

      3c24e8c069a63db138fe582142baf01b

    • SHA1

      bc9a2f3542fe9fef211fe86973e227c3c98bd26b

    • SHA256

      b0cd73895d1b7abd9afde556464733feb46e5da3eaf5bc0b105b4fc15b726712

    • SHA512

      79f740b56ff4f252ede5226e34657c9ad81caf3fde1dde1ad904bea291b82660cc986b76fd15d6035316c2b714df46d3c692ae98a987f0a7041b11c6d6c8aa16

    • SSDEEP

      6144:FZuuObR8sVImcyYmDuDOJTv5PWo89GPTT7UuZt9FxhZwp:6V+mzjUOJb5PSyXUuDHqp

    Score
    7/10
    adwarepersistencestealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Adds Run key to start application

      persistence

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Browser Extensions

1
T1176

Privilege Escalation

Defense Evasion

Modify Registry

3
T1112

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks