Overview

overview

8

Static

static

3

7da18a3e51...cf.exe

windows7-x64

8

7da18a3e51...cf.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7da18a3e51d54b5ee1de595eb54dc0cf

  • Size

    345KB

  • Sample

    240128-wgg5csfaf5

  • MD5

    7da18a3e51d54b5ee1de595eb54dc0cf

  • SHA1

    2611914a98da93c30bec53e3714de7d5683ebef3

  • SHA256

    8ccecbcc5fe4670e7c67a7c851f1ac478e2d38c249307b11e77f34dc04e69d73

  • SHA512

    d42bd1fdc7c3ea3247ecbe4ee7ee5f76a89cc790e0082e80767b3a2ee0b136ff49b2af2695675ea2837fdcda5aecf00205586d9e60afb9b66bfbab3797ed986f

  • SSDEEP

    6144:4Ds9+0eSwi5eSqgULb1INQS5muT9EvORYze478pYBh8F1s:7+1LBgUf1IqS5mhOd4opUh8F1

Score
8/10
adwarebootkitpersistencestealer

Malware Config

Targets

    • Target

      7da18a3e51d54b5ee1de595eb54dc0cf

    • Size

      345KB

    • MD5

      7da18a3e51d54b5ee1de595eb54dc0cf

    • SHA1

      2611914a98da93c30bec53e3714de7d5683ebef3

    • SHA256

      8ccecbcc5fe4670e7c67a7c851f1ac478e2d38c249307b11e77f34dc04e69d73

    • SHA512

      d42bd1fdc7c3ea3247ecbe4ee7ee5f76a89cc790e0082e80767b3a2ee0b136ff49b2af2695675ea2837fdcda5aecf00205586d9e60afb9b66bfbab3797ed986f

    • SSDEEP

      6144:4Ds9+0eSwi5eSqgULb1INQS5muT9EvORYze478pYBh8F1s:7+1LBgUf1IqS5mhOd4opUh8F1

    Score
    8/10
    adwarebootkitpersistencestealer

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Loads dropped DLL

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

      bootkitpersistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks