Overview

overview

8

Static

static

3

13d4354937...de.exe

windows7-x64

8

13d4354937...de.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    13d43549374a9aa46cef63d47afa77de

  • Size

    164KB

  • Sample

    231230-kt25hsdcfq

  • MD5

    13d43549374a9aa46cef63d47afa77de

  • SHA1

    b6fb21326ab17a2323bf4947f9db201b3c015232

  • SHA256

    4ac92af14bcbc9e449a5ae9daf547c72639eb54557a22749dd21459183c592a3

  • SHA512

    92c83251dacd0d3dafdc8cedc338b0bc3df61b04666144ed07cef37e7f5bc9c408419e6a129a170bfeea31e13e722e022c602c7fdf1b48339bac1627ec17d589

  • SSDEEP

    3072:FQyjlVKiaGdorua81PN9DTMEz4Di785f4vrdrp8dnGn5Gx:FQyhWKa8zFTJz4+oJ4vBrUnGA

Score
8/10
adwareaspackv2persistencestealerupx

Malware Config

Targets

    • Target

      13d43549374a9aa46cef63d47afa77de

    • Size

      164KB

    • MD5

      13d43549374a9aa46cef63d47afa77de

    • SHA1

      b6fb21326ab17a2323bf4947f9db201b3c015232

    • SHA256

      4ac92af14bcbc9e449a5ae9daf547c72639eb54557a22749dd21459183c592a3

    • SHA512

      92c83251dacd0d3dafdc8cedc338b0bc3df61b04666144ed07cef37e7f5bc9c408419e6a129a170bfeea31e13e722e022c602c7fdf1b48339bac1627ec17d589

    • SSDEEP

      3072:FQyjlVKiaGdorua81PN9DTMEz4Di785f4vrdrp8dnGn5Gx:FQyhWKa8zFTJz4+oJ4vBrUnGA

    Score
    8/10
    adwareaspackv2persistencestealerupx

    • Drops file in Drivers directory

    • Sets service image path in registry

      persistence

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

      aspackv2

    • Deletes itself

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks