Overview

overview

8

Static

static

3

3f2e5dc157...73.exe

windows7-x64

3

3f2e5dc157...73.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3f2e5dc1577272631b4aab78a69c9773

  • Size

    444KB

  • Sample

    240103-2csyysbfgm

  • MD5

    3f2e5dc1577272631b4aab78a69c9773

  • SHA1

    833dca8aefccc77225dd33ae4d455da1c99bf87e

  • SHA256

    dec9ce65ecb493235ee4eb870ba1300e0a4f5aba4b762f3b1b22cf5001b77ca3

  • SHA512

    e33d0d9c61e0d382c8f38fef52a321563d72d49ccb8705111c0eba380e5e64ec04d413353d86ebcb1a365ccda79183cf0bbb9164a6644c826c3030e9cd758d0b

  • SSDEEP

    12288:mxTNNB1ZaeBLKwThUrYkPYPzIeyKTYG9UNjwvHKctfI5+CK0:EXB1ZaeBv6VPYPvTP9+wf/tfO+C

Score
8/10
adwarediscoverypersistencestealer

Malware Config

Targets

    • Target

      3f2e5dc1577272631b4aab78a69c9773

    • Size

      444KB

    • MD5

      3f2e5dc1577272631b4aab78a69c9773

    • SHA1

      833dca8aefccc77225dd33ae4d455da1c99bf87e

    • SHA256

      dec9ce65ecb493235ee4eb870ba1300e0a4f5aba4b762f3b1b22cf5001b77ca3

    • SHA512

      e33d0d9c61e0d382c8f38fef52a321563d72d49ccb8705111c0eba380e5e64ec04d413353d86ebcb1a365ccda79183cf0bbb9164a6644c826c3030e9cd758d0b

    • SSDEEP

      12288:mxTNNB1ZaeBLKwThUrYkPYPzIeyKTYG9UNjwvHKctfI5+CK0:EXB1ZaeBv6VPYPvTP9+wf/tfO+C

    Score
    8/10
    adwarediscoverypersistencestealer

    • Blocklisted process makes network request

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks