Overview

overview

7

Static

static

3

HappyDesk1.0.0.exe

windows7-x64

7

HappyDesk1.0.0.exe

windows10-2004-x64

7

新云软件.url

windows7-x64

1

新云软件.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    91f8dbab45da195d9ed73c77e98f189e
  • Size 1.9MB
  • Sample240205-pfwg2afdf3
  • SHA256 6f2e8ad2b5120e0d11b02a671e0290f6d81d010a64287862754dedad4a77b4e7
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10
adwarediscoverystealer

Malware Config

Targets

    • Target
      HappyDesk1.0.0.exe
    • Size 2.0MB
    • SHA256 a3fd14753f2d26dbb17fec41e7cd0e8a72317c114559a3ae5ced89e22e8d85bc
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10
    adwarediscoverystealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Drops file in System32 directory

    behavioral1behavioral2
    • Target
      新云软件.url
    • Size 133B
    • SHA256 df65af1fc1e09f6effbde7e0ef1cb64d6caeef1f62b0e6467821efa032533678
    • MD5 SHA1 SHA512
    Score
    1/10
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks