Overview

overview

7

Static

static

3

IDM_v6.42_...Ze.zip

windows7-x64

1

IDM_v6.42_...Ze.zip

windows10-2004-x64

1

Full Progr...ir.url

windows7-x64

1

Full Progr...ir.url

windows10-2004-x64

1

Full indir...si.url

windows7-x64

1

Full indir...si.url

windows10-2004-x64

1

Internet D... 3.exe

windows7-x64

7

Internet D... 3.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    IDM_v6.42_B3_KiNGHaZe.zip
  • Size 9.4MB
  • Sample240215-2ynalabe73
  • SHA256 d060507aa4bd24193bdaa97df21553c5bba501b4bb13baf13623489ba0f6a903
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10
adwarediscoverypersistencestealer

Malware Config

Targets

    • Target
      IDM_v6.42_B3_KiNGHaZe.zip
    • Size 9.4MB
    • SHA256 d060507aa4bd24193bdaa97df21553c5bba501b4bb13baf13623489ba0f6a903
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10
    behavioral1behavioral2
    • Target
      Full Program İndir Full Programlar İndir - Oyun İndir.url
    • Size 126B
    • SHA256 f082f1a50da8cc06a741387db441ac6bb8676c9a1f90c7299b165f5150470189
    • MD5 SHA1 SHA512
    Score
    1/10
    behavioral3behavioral4
    • Target
      Full indir - Full İndir.Cafe - Program, Oyun, Film, Apk, Full İndirme Sitesi.url
    • Size 117B
    • SHA256 92c4d784bbcf578674808c596c17f73b7733f2e846818cbebc88c15e897aa522
    • MD5 SHA1 SHA512
    Score
    1/10
    behavioral5behavioral6
    • Target
      Internet Download Manager 6.42 Build 3.exe
    • Size 9.4MB
    • SHA256 4933c1bb9eb88f3a5b8a410519a23ca951996a4cff25225cccd5abbdffce0def
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10
    adwarediscoverypersistencestealer

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Registers COM server for autorun

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    behavioral7behavioral8

MITRE ATT&CK Enterprise v15

Tasks