Overview

overview

7

Static

static

3

1681aac158...ed.exe

windows7-x64

7

1681aac158...ed.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    1681aac158d6f0f8b73fba2096022bed

  • Size

    313KB

  • Sample

    231224-2mj4ssgdf8

  • MD5

    1681aac158d6f0f8b73fba2096022bed

  • SHA1

    86fd53bb35442774bb8acaab6765c67767a76333

  • SHA256

    b652fc9008753a42a50f76fddd04fb51b3510f13f390b3a6950ab757dd5a07c3

  • SHA512

    94a94c616d59a0a1128025ca358a2d0886b1ce7e42167cc930098264bca721d5e83bc9f332fba10b057d30d564b9f86065552fde7279d799ce9cf661d8a78b57

  • SSDEEP

    6144:91OgDPdkBAFZWjadD4ssvKdSucy0nCoeUlNyuUiQW2xkTbuYcp:91OgLdaPeSucLnX7jyuUiQW2xkTbuJ

Score
7/10
adwarediscoveryspywarestealer

Malware Config

Targets

    • Target

      1681aac158d6f0f8b73fba2096022bed

    • Size

      313KB

    • MD5

      1681aac158d6f0f8b73fba2096022bed

    • SHA1

      86fd53bb35442774bb8acaab6765c67767a76333

    • SHA256

      b652fc9008753a42a50f76fddd04fb51b3510f13f390b3a6950ab757dd5a07c3

    • SHA512

      94a94c616d59a0a1128025ca358a2d0886b1ce7e42167cc930098264bca721d5e83bc9f332fba10b057d30d564b9f86065552fde7279d799ce9cf661d8a78b57

    • SSDEEP

      6144:91OgDPdkBAFZWjadD4ssvKdSucy0nCoeUlNyuUiQW2xkTbuYcp:91OgLdaPeSucLnX7jyuUiQW2xkTbuJ

    Score
    7/10
    adwarediscoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks