Overview

overview

8

Static

static

3

ad5f4c107e...37.exe

windows7-x64

8

ad5f4c107e...37.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    ad5f4c107e5e0a0da6fe0241e17fcc37

  • Size

    340KB

  • Sample

    240229-b4le3saf58

  • MD5

    ad5f4c107e5e0a0da6fe0241e17fcc37

  • SHA1

    cf0c7dafee5f460e3267b25b959b636955d53b03

  • SHA256

    db1e9d3ab73a24ff896e12b8d808d9ce1abd35503b5004bab75aa3c8407df9f1

  • SHA512

    b1baf81f70de25eda12dd812547b3f41b281442a83c3d32bd59a566b96481bb0cb4d73559ea9a9e0ba1030ec7b1a244a89bc8ffe452243d27a423e9bf8915148

  • SSDEEP

    6144:iWqFq8v4p2R1/Zd+dQChqKpEdnivm5XWGFS0slDbAOvPdT:ibFrvnX+dFqQYnl5XWWSLDb

Score
8/10
evasionpersistencespywarestealer

Malware Config

Targets

    • Target

      ad5f4c107e5e0a0da6fe0241e17fcc37

    • Size

      340KB

    • MD5

      ad5f4c107e5e0a0da6fe0241e17fcc37

    • SHA1

      cf0c7dafee5f460e3267b25b959b636955d53b03

    • SHA256

      db1e9d3ab73a24ff896e12b8d808d9ce1abd35503b5004bab75aa3c8407df9f1

    • SHA512

      b1baf81f70de25eda12dd812547b3f41b281442a83c3d32bd59a566b96481bb0cb4d73559ea9a9e0ba1030ec7b1a244a89bc8ffe452243d27a423e9bf8915148

    • SSDEEP

      6144:iWqFq8v4p2R1/Zd+dQChqKpEdnivm5XWGFS0slDbAOvPdT:ibFrvnX+dFqQYnl5XWWSLDb

    Score
    8/10
    evasionpersistencespywarestealer

    • Disables taskbar notifications via registry modification

      evasion

    • Modifies Installed Components in the registry

      persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks