Overview

overview

8

Static

static

3

188584ba23...45.exe

windows7-x64

188584ba23...45.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    188584ba234cb64de7764c4df850cd45

  • Size

    244KB

  • Sample

    231230-pnhwxaahe6

  • MD5

    188584ba234cb64de7764c4df850cd45

  • SHA1

    2a0a969427f6d7fd5862b3d172160f388b925e9e

  • SHA256

    38b62342a67b5258460ce34f0a4bd7abb660840bcacf6e10948d3be1cd1ea2d8

  • SHA512

    defda9362909e3e7fee8aaf986fb9eec60a435c5340895cd0a9577c10620dbe811abbd556fe9ecb37587dea18df09846f5512db2280a0aed322c4f4f510fa28d

  • SSDEEP

    6144:OLbIR1ZMKxFEcJN+bqBT7C/ubWqeSHDcN:3RFxecuYC/ubWtSHQ

Score
8/10
adwarepersistencestealer

Malware Config

Targets

    • Target

      188584ba234cb64de7764c4df850cd45

    • Size

      244KB

    • MD5

      188584ba234cb64de7764c4df850cd45

    • SHA1

      2a0a969427f6d7fd5862b3d172160f388b925e9e

    • SHA256

      38b62342a67b5258460ce34f0a4bd7abb660840bcacf6e10948d3be1cd1ea2d8

    • SHA512

      defda9362909e3e7fee8aaf986fb9eec60a435c5340895cd0a9577c10620dbe811abbd556fe9ecb37587dea18df09846f5512db2280a0aed322c4f4f510fa28d

    • SSDEEP

      6144:OLbIR1ZMKxFEcJN+bqBT7C/ubWqeSHDcN:3RFxecuYC/ubWtSHQ

    Score
    8/10
    adwarepersistencestealer

    • Sets DLL path for service in the registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks