Overview

overview

8

Static

static

3

05e89df3dd...45.exe

windows7-x64

8

05e89df3dd...45.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    05e89df3dd9b5902bc89b9f24d2f6d45

  • Size

    436KB

  • Sample

    231225-fdmbxahghr

  • MD5

    05e89df3dd9b5902bc89b9f24d2f6d45

  • SHA1

    0ae24aa08f14911ed29f737dbe02808be7ab650b

  • SHA256

    e13d84ed66c1b84715e91c2631527daa905593aac5831c54feb998c31f911932

  • SHA512

    65a631a705ce5a8245d249f74148883cab8ae487adf41428d8228dc1c6a662b37216c439c9ec827784d594c95e93e1241d4c843a36845a6281992d61c58a6ff2

  • SSDEEP

    12288:TTG2GUf8kxszOf/vRV9galubq/fLH9NLAlSaqOd38OSmvtu:Ta+8BzyJCqrdRAlSaq/F

Score
8/10
adwarebootkitpersistencestealer

Malware Config

Targets

    • Target

      05e89df3dd9b5902bc89b9f24d2f6d45

    • Size

      436KB

    • MD5

      05e89df3dd9b5902bc89b9f24d2f6d45

    • SHA1

      0ae24aa08f14911ed29f737dbe02808be7ab650b

    • SHA256

      e13d84ed66c1b84715e91c2631527daa905593aac5831c54feb998c31f911932

    • SHA512

      65a631a705ce5a8245d249f74148883cab8ae487adf41428d8228dc1c6a662b37216c439c9ec827784d594c95e93e1241d4c843a36845a6281992d61c58a6ff2

    • SSDEEP

      12288:TTG2GUf8kxszOf/vRV9galubq/fLH9NLAlSaqOd38OSmvtu:Ta+8BzyJCqrdRAlSaq/F

    Score
    8/10
    adwarebootkitpersistencestealer

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Loads dropped DLL

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks