Overview

overview

7

Static

static

3

03a909dec0...3e.exe

windows7-x64

7

03a909dec0...3e.exe

windows10-2004-x64

7

$PLUGINSDI...is.dll

windows7-x64

3

$PLUGINSDI...is.dll

windows10-2004-x64

3

ffMediaVie...ion.js

windows7-x64

1

ffMediaVie...ion.js

windows10-2004-x64

1

ff/chrome/...068.js

windows7-x64

1

ff/chrome/...068.js

windows10-2004-x64

1

ff/chrome/...ion.js

windows7-x64

1

ff/chrome/...ion.js

windows10-2004-x64

1

ie/MediaVi...68.dll

windows7-x64

6

ie/MediaVi...68.dll

windows10-2004-x64

6

uninstall.exe

windows7-x64

7

uninstall.exe

windows10-2004-x64

7

$PLUGINSDI...is.dll

windows7-x64

3

$PLUGINSDI...is.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    03a909dec05f764304e2916f1ad69c0146ce444c952b104e2262a8f107154a3e

  • Size

    944KB

  • Sample

    240309-ya6kgsgh8t

  • MD5

    b1f98612a2acb44b797cdc25d4a2d556

  • SHA1

    abcd0154adcd340528e923e625c7828911c36a01

  • SHA256

    03a909dec05f764304e2916f1ad69c0146ce444c952b104e2262a8f107154a3e

  • SHA512

    543e3444f1e9ed3e307aec297016488846580c5fad7d60b7180c8fcb3a4e5c628e34a424dce5652ccd5f5de68c20da8f084b710780897f34eba53c917537582c

  • SSDEEP

    12288:9bpdy+e/OgG4GfJMRo0dHvZjZLGFSGzBg8EtbQdRaMr+07HeZjZLnWmGzHg8546x:9epG4Gxuo0fZLGFNfkm+0CZLnWDKoZ

Score
7/10
adwarediscoveryspywarestealer

Malware Config

Targets

    • Target

      03a909dec05f764304e2916f1ad69c0146ce444c952b104e2262a8f107154a3e

    • Size

      944KB

    • MD5

      b1f98612a2acb44b797cdc25d4a2d556

    • SHA1

      abcd0154adcd340528e923e625c7828911c36a01

    • SHA256

      03a909dec05f764304e2916f1ad69c0146ce444c952b104e2262a8f107154a3e

    • SHA512

      543e3444f1e9ed3e307aec297016488846580c5fad7d60b7180c8fcb3a4e5c628e34a424dce5652ccd5f5de68c20da8f084b710780897f34eba53c917537582c

    • SSDEEP

      12288:9bpdy+e/OgG4GfJMRo0dHvZjZLGFSGzBg8EtbQdRaMr+07HeZjZLnWmGzHg8546x:9epG4Gxuo0fZLGFNfkm+0CZLnWDKoZ

    Score
    7/10
    adwarediscoveryspywarestealer

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

    • Target

      $PLUGINSDIR/aminsis.dll

    • Size

      834KB

    • MD5

      14ad04243334645f399639b028f21d17

    • SHA1

      7368866dc95621a1407d2105d040da2cc9852ba9

    • SHA256

      02d13f28df1314640474ee77cd202a2c0da8e1d609c614f8fdff4451f8ee63fa

    • SHA512

      3859b6f6e7e46ba70fa0be24fd2ceadf3db746818f11a09109c7bb678ee4fc08824a0cf15c77df09c3b2bdc2a80067a98130660152f5ee61e4bd501ef5ed1728

    • SSDEEP

      24576:SeVFdvT0HpQ/lWfCbFTwjuYktS3mmcQFbxr:rVFd4pQU/qS3mvQF9

    Score
    3/10
    behavioral3behavioral4

    • Target

      ffMediaViewerV1alpha2068chaction.js

    • Size

      721B

    • MD5

      76bfbdc629ddca98935c4c246336ff07

    • SHA1

      3d3f500a45579bffb4678d9fa06f89b0f3b1a79d

    • SHA256

      db47a2daf9ff0cc2e7a46825da2b6f3b8d945dbde6029cdb98051acd14103a2d

    • SHA512

      ebdb8681424d6e7373982b7c282c08e3a79e1cfd705bc9cb25a11ae0b0555a5f0adcf51f0b2c4a5be13c51c899db510a291b8e23122c12502be2f9ffc0caa849

    Score
    1/10
    behavioral5behavioral6

    • Target

      ff/chrome/content/ffMediaViewerV1alpha2068.js

    • Size

      753B

    • MD5

      ab05cb9faf1fcfde7eb136bb2bb44a0c

    • SHA1

      4b6f061658188e6a9b3cd439380e76e9a7a174f5

    • SHA256

      28556dd01b44ad1ee7392e64eb3da13183d660cc806e682286715822e1a315e7

    • SHA512

      36feeb49892f987006cc5bcbbd4db978babddf9a57f2ea50dfc7e54269d46b06da824e426624096fb1a11fa25cec538ba1c04963b87fbd4a5809d10dc4d6ecfe

    Score
    1/10
    behavioral7behavioral8

    • Target

      ff/chrome/content/ffMediaViewerV1alpha2068ffaction.js

    • Size

      567B

    • MD5

      b34ef622298cba0037939574c4df6f4d

    • SHA1

      54ab4fba61fa65aaac8547fb421a43f9cd079797

    • SHA256

      86c913edf443675825236251b7f39372b9fb765713d9b1df540d1e5b946098ce

    • SHA512

      b578d98b2638175d89521b1d5acca09443dba951bc8007304398655b1bd2296105bb0879a199a77079b6910053d1886947e61ac960396c777c4b0a4220cdd347

    Score
    1/10
    behavioral10behavioral9

    • Target

      ie/MediaViewerV1alpha2068.dll

    • Size

      85KB

    • MD5

      f795fe4cd14fde265b0631b61ce71d2a

    • SHA1

      c2ea5f2385571cfd5f16238bc328869bf9312e14

    • SHA256

      e31c8b4d8ef564d7c93b4c5c2fc39ef2c2bd5ff4123aa733931b33e5b274d07e

    • SHA512

      ee50025d7a0413d072fc4f08cffc797edd996230ed07337c81d0968a102d9987f401903d04a84a947d073b6fba55dcc84802efc3a83d7866222ec0f16c3abde1

    • SSDEEP

      1536:sf/NCsMuE0kZqt/8KKI0cTk6iJAJlQQs6nAX:oNOuE0kZ8/8KhDiJoax6A

    Score
    6/10
    adwarestealer

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral11behavioral12

    • Target

      uninstall.exe

    • Size

      442KB

    • MD5

      1cfaf32714bda91f4cb7ede7d7118974

    • SHA1

      f6e3ce246751c4692cfec88ae5832c7670f32aae

    • SHA256

      d0a8add51ef59e7bd1f0c9dc015bb85ae44be8b3b468a38fa1fcc60555519cd5

    • SHA512

      91d16fa33d5e027740756d4d2cbe88f6c35162106bc059f565981724395e9a5e7559255e3d01356b7efb15ee6ed54ecc414b53d444eb560c9b258e3d484f611f

    • SSDEEP

      6144:0e34umb13SbMGb7xS0O6dSeNRTvzVIGHjZm7qGmsp3dH09y/SdwZzg8ANBTbRUJp:XmJMRo0dHvZjZLGFSGzBg8EtbQd/

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer
    behavioral13behavioral14

    • Target

      $PLUGINSDIR/aminsis.dll

    • Size

      834KB

    • MD5

      14ad04243334645f399639b028f21d17

    • SHA1

      7368866dc95621a1407d2105d040da2cc9852ba9

    • SHA256

      02d13f28df1314640474ee77cd202a2c0da8e1d609c614f8fdff4451f8ee63fa

    • SHA512

      3859b6f6e7e46ba70fa0be24fd2ceadf3db746818f11a09109c7bb678ee4fc08824a0cf15c77df09c3b2bdc2a80067a98130660152f5ee61e4bd501ef5ed1728

    • SSDEEP

      24576:SeVFdvT0HpQ/lWfCbFTwjuYktS3mmcQFbxr:rVFd4pQU/qS3mvQF9

    Score
    3/10
    behavioral15behavioral16

MITRE ATT&CK Enterprise v15

Tasks