Overview

overview

8

Static

static

3

3c2d81eaee...77.exe

windows7-x64

8

3c2d81eaee...77.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3c2d81eaee0204ac08594ca6872f1b77

  • Size

    431KB

  • Sample

    240101-hpszyagbc4

  • MD5

    3c2d81eaee0204ac08594ca6872f1b77

  • SHA1

    4882168c92b3c1f91e21289436c5f482025b3522

  • SHA256

    e606d4733adf353c8a7bf7d021e43c3920a304538bef46d857df5fd5b64e3dc1

  • SHA512

    2195fdab9a36b177fe8c4518b2e6f0212e546a70ad105f276e826ec5a5db4e2d48a5d1551e0738354444bcc5e23af921b004a4788d57349fcc8d125657c50434

  • SSDEEP

    12288:sQ412eBEXfiDanUdpqjyzyQlPKEEQsd+xB:ZNeBIqoY7plPKhNd+7

Score
8/10
adwareevasionstealerupx

Malware Config

Targets

    • Target

      3c2d81eaee0204ac08594ca6872f1b77

    • Size

      431KB

    • MD5

      3c2d81eaee0204ac08594ca6872f1b77

    • SHA1

      4882168c92b3c1f91e21289436c5f482025b3522

    • SHA256

      e606d4733adf353c8a7bf7d021e43c3920a304538bef46d857df5fd5b64e3dc1

    • SHA512

      2195fdab9a36b177fe8c4518b2e6f0212e546a70ad105f276e826ec5a5db4e2d48a5d1551e0738354444bcc5e23af921b004a4788d57349fcc8d125657c50434

    • SSDEEP

      12288:sQ412eBEXfiDanUdpqjyzyQlPKEEQsd+xB:ZNeBIqoY7plPKhNd+7

    Score
    8/10
    adwareevasionstealerupx

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks