Overview

overview

8

Static

static

7

4778c3c36b...80.exe

windows7-x64

8

4778c3c36b...80.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    4778c3c36bacc1f72d7f92559de7be80

  • Size

    18KB

  • Sample

    240106-3q83rsadfm

  • MD5

    4778c3c36bacc1f72d7f92559de7be80

  • SHA1

    5d17cfcd60a3394527460b4de6ce8e30b4558ce4

  • SHA256

    e9bc5e48e50318d5516cb8bd46bb4723d7227f22ea36f13da72d8797834e3d3b

  • SHA512

    44725509f77be5bcb740ccd884a8252875b0c557dc200480f22415774c8b9afe7de7f34f1ff20bf283786b790d6cfa2a92ab5e98be656c1fe5438627b0bb620e

  • SSDEEP

    384:qyBTW3kTji2ntn7S0MMEVzeLAiNuJ6IiJlyB9qIXgRP8mCsDG:qYa3kTji2nlIVKMcNTXIC8mCG

Score
8/10
adwarepersistencestealerupx

Malware Config

Targets

    • Target

      4778c3c36bacc1f72d7f92559de7be80

    • Size

      18KB

    • MD5

      4778c3c36bacc1f72d7f92559de7be80

    • SHA1

      5d17cfcd60a3394527460b4de6ce8e30b4558ce4

    • SHA256

      e9bc5e48e50318d5516cb8bd46bb4723d7227f22ea36f13da72d8797834e3d3b

    • SHA512

      44725509f77be5bcb740ccd884a8252875b0c557dc200480f22415774c8b9afe7de7f34f1ff20bf283786b790d6cfa2a92ab5e98be656c1fe5438627b0bb620e

    • SSDEEP

      384:qyBTW3kTji2ntn7S0MMEVzeLAiNuJ6IiJlyB9qIXgRP8mCsDG:qYa3kTji2nlIVKMcNTXIC8mCG

    Score
    8/10
    adwarepersistencestealerupx

    • Adds policy Run key to start application

      persistence

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks