Overview

overview

7

Static

static

1

Endermanch...er.exe

windows7-x64

7

Endermanch...er.exe

windows10-2004-x64

7

6AdwCleaner.exe

windows7-x64

6

6AdwCleaner.exe

windows10-2004-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target
    FakeAdwCleaner.zip
  • Size 175KB
  • Sample240603-w15d1aee9y
  • SHA256 92e885d1763e4ba1abc92bee9b08ca7a2ae358bda5fe98b31a8e217327982bf7
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10
persistence

Malware Config

Targets

    • Target
      [email protected]
    • Size 190KB
    • SHA256 51290129cccca38c6e3b4444d0dfb8d848c8f3fc2e5291fc0d219fd642530adc
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10
    persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2
    • Target
      6AdwCleaner.exe
    • Size 168KB
    • SHA256 4f0033e811fe2497b38f0d45df958829d01933ebe7d331079eefc8e38fbeaa61
    • MD5 SHA1 SHA512 SSDEEP
    Score
    6/10
    persistence
    behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks