Overview

overview

7

Static

static

7

8caeb3f66b...6c.exe

windows7-x64

7

8caeb3f66b...6c.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    8caeb3f66bac28e0ac000e6fbf4e296c

  • Size

    46KB

  • Sample

    240203-svwccsced7

  • MD5

    8caeb3f66bac28e0ac000e6fbf4e296c

  • SHA1

    46f6f2d8af75004a3c904732dfd62bad3d5e1212

  • SHA256

    7dfad274763ffda7420671c9aaf9ea5c5517335ca4f866bfd9bddba4437e6251

  • SHA512

    684c8fb4100449284f2b3aea60942fd89a24296b40552d44382a92e6e2cf2878a7dd70fbe19223b5bf29c55cb94c2104dc398231bb3c1995fb0b260413e00b22

  • SSDEEP

    768:nElXR3Ms54nTuQjHOaoyy4n+mtiCI1mq4OgVcH5dvTToe:nE15F8TuqiI+wMgOHbvTToe

Score
7/10
adwarepersistencestealerupx

Malware Config

Targets

    • Target

      8caeb3f66bac28e0ac000e6fbf4e296c

    • Size

      46KB

    • MD5

      8caeb3f66bac28e0ac000e6fbf4e296c

    • SHA1

      46f6f2d8af75004a3c904732dfd62bad3d5e1212

    • SHA256

      7dfad274763ffda7420671c9aaf9ea5c5517335ca4f866bfd9bddba4437e6251

    • SHA512

      684c8fb4100449284f2b3aea60942fd89a24296b40552d44382a92e6e2cf2878a7dd70fbe19223b5bf29c55cb94c2104dc398231bb3c1995fb0b260413e00b22

    • SSDEEP

      768:nElXR3Ms54nTuQjHOaoyy4n+mtiCI1mq4OgVcH5dvTToe:nE15F8TuqiI+wMgOHbvTToe

    Score
    7/10
    adwarepersistencestealerupx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks