Overview

overview

10

Static

static

3

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    87f53b86fabf6e6a4da32aae72f12b7b208d10f835b8903b93cd8c456494cf88

  • Size

    694KB

  • Sample

    230425-17gzhadc58

  • MD5

    c88d16a49b7babc5381c0d7426eac720

  • SHA1

    3da7e4f6dd930063887c1dc5f4a39f3e08e4d000

  • SHA256

    87f53b86fabf6e6a4da32aae72f12b7b208d10f835b8903b93cd8c456494cf88

  • SHA512

    a4ecd81cc801f0265872f505bcb446e1a43b198e555e5866d76ffe8878b51b08ea51a4ff4333a40f8a6cb0ca7759b113fae583ffa9f0b75ec813c71037e8ea35

  • SSDEEP

    12288:ly90uDNpuBy+MELYum/Xy72rELqlni5VdUN0cRAbP5HBkGEFG8w:lyzDN0MY773qlEdUerbG/w

Score
10/10
discoveryevasionpersistencespywarestealertrojan

Malware Config

Targets

    • Target

      87f53b86fabf6e6a4da32aae72f12b7b208d10f835b8903b93cd8c456494cf88

    • Size

      694KB

    • MD5

      c88d16a49b7babc5381c0d7426eac720

    • SHA1

      3da7e4f6dd930063887c1dc5f4a39f3e08e4d000

    • SHA256

      87f53b86fabf6e6a4da32aae72f12b7b208d10f835b8903b93cd8c456494cf88

    • SHA512

      a4ecd81cc801f0265872f505bcb446e1a43b198e555e5866d76ffe8878b51b08ea51a4ff4333a40f8a6cb0ca7759b113fae583ffa9f0b75ec813c71037e8ea35

    • SSDEEP

      12288:ly90uDNpuBy+MELYum/Xy72rELqlni5VdUN0cRAbP5HBkGEFG8w:lyzDN0MY773qlEdUerbG/w

    Score
    10/10
    discoveryevasionpersistencespywarestealertrojan

    • Modifies Windows Defender Real-time Protection settings

      evasiontrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Windows security modification

      evasiontrojan

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks