Overview

overview

10

Static

static

10

0881483b7d...90.exe

windows7-x64

10

0881483b7d...90.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0881483b7d6ecb95695db7612b7c956132e3674d5b1a252e5454ce716f914890

  • Size

    269KB

  • Sample

    240312-vzxgbsgg42

  • MD5

    889a64c8b5d9dc6e1c10d2c1264ebf64

  • SHA1

    a93957aa786e4559ab4dcb1fad348e19161cec7d

  • SHA256

    0881483b7d6ecb95695db7612b7c956132e3674d5b1a252e5454ce716f914890

  • SHA512

    bd333cbd50cf1c78adf5a2295d49bb51f01011759afdb9ad54bd9f60c4945e2fbcb6dfe2c511316c446e155f4759a095da06b58d2b57ef57a0c1db977165924b

  • SSDEEP

    6144:ajbSAheDy/B+ybSxbSxbSxbSxbSVez3RbS1bSDAbSxbS0YheDObSB2heDk:aDRZeeeex4DepGJgov

Score
10/10
adwarepersistencestealerupx

Malware Config

Targets

    • Target

      0881483b7d6ecb95695db7612b7c956132e3674d5b1a252e5454ce716f914890

    • Size

      269KB

    • MD5

      889a64c8b5d9dc6e1c10d2c1264ebf64

    • SHA1

      a93957aa786e4559ab4dcb1fad348e19161cec7d

    • SHA256

      0881483b7d6ecb95695db7612b7c956132e3674d5b1a252e5454ce716f914890

    • SHA512

      bd333cbd50cf1c78adf5a2295d49bb51f01011759afdb9ad54bd9f60c4945e2fbcb6dfe2c511316c446e155f4759a095da06b58d2b57ef57a0c1db977165924b

    • SSDEEP

      6144:ajbSAheDy/B+ybSxbSxbSxbSxbSVez3RbS1bSDAbSxbS0YheDObSB2heDk:aDRZeeeex4DepGJgov

    Score
    10/10
    adwarepersistencestealerupx

    • Modifies WinLogon for persistence

      persistence

    • UPX dump on OEP (original entry point)

    • Drops file in Drivers directory

    • Sets service image path in registry

      persistence

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Adds Run key to start application

      persistence

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware

    • Modifies WinLogon

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks