Overview

overview

8

Static

static

3

b9e5a6b455...da.exe

windows7-x64

b9e5a6b455...da.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b9e5a6b455e44f44f9f9ddaa2d80d9da

  • Size

    244KB

  • Sample

    240307-24dcksgf95

  • MD5

    b9e5a6b455e44f44f9f9ddaa2d80d9da

  • SHA1

    42a9b78a5a4b66e2d692f6bee64c3c140e1360e9

  • SHA256

    7863e8dea89549a450f1fa863380092aafaa92252b934a3ed0542e7ad94e6714

  • SHA512

    b65672ab6b4d946f7f81bbbef7ece5fae72372f6500c944fd020cf6795ba1441dcb6c24947da7b70b30c78257fe1bb51d327591d1f9051f700a2ab4fc830ceb0

  • SSDEEP

    6144:aLTH/MyYGHK0ZxnJw2djRldo4OLp6u9ZST:6/9YGHK0ZRJw2djRl1OF6u9ZST

Score
8/10
adwarepersistencestealer

Malware Config

Targets

    • Target

      b9e5a6b455e44f44f9f9ddaa2d80d9da

    • Size

      244KB

    • MD5

      b9e5a6b455e44f44f9f9ddaa2d80d9da

    • SHA1

      42a9b78a5a4b66e2d692f6bee64c3c140e1360e9

    • SHA256

      7863e8dea89549a450f1fa863380092aafaa92252b934a3ed0542e7ad94e6714

    • SHA512

      b65672ab6b4d946f7f81bbbef7ece5fae72372f6500c944fd020cf6795ba1441dcb6c24947da7b70b30c78257fe1bb51d327591d1f9051f700a2ab4fc830ceb0

    • SSDEEP

      6144:aLTH/MyYGHK0ZxnJw2djRldo4OLp6u9ZST:6/9YGHK0ZRJw2djRl1OF6u9ZST

    Score
    8/10
    adwarepersistencestealer

    • Sets DLL path for service in the registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks