Overview

overview

7

Static

static

3

c40edab8ba...eN.exe

windows7-x64

7

c40edab8ba...eN.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c40edab8baf3bdc95a8a7aa405c8d6318fb4aa0dcdf6eb89b9400767dfb53c0eN

  • Size

    313KB

  • Sample

    240928-smy4aavdrc

  • MD5

    f1c28d192feaff33aba1c8b5e40cceb0

  • SHA1

    473220f47e98228bc67ed7462d4017b63c911be1

  • SHA256

    c40edab8baf3bdc95a8a7aa405c8d6318fb4aa0dcdf6eb89b9400767dfb53c0e

  • SHA512

    7dc67982a874e96bdd2af44d05144b402460bf6ce6cab6b297cc6e64017acc7b2cd459e0907e6cecd799997b611f965bf2f9058cea630e942b28617add4cfb59

  • SSDEEP

    6144:91OgDPdkBAFZWjadD4sa5G7TqsV4A8Xe7u2SAR2GMkIeVqo4Td+M8:91OgLdaY7Vb8ODsGfT3Dl

Score
7/10
adwarediscoveryspywarestealer

Malware Config

Targets

    • Target

      c40edab8baf3bdc95a8a7aa405c8d6318fb4aa0dcdf6eb89b9400767dfb53c0eN

    • Size

      313KB

    • MD5

      f1c28d192feaff33aba1c8b5e40cceb0

    • SHA1

      473220f47e98228bc67ed7462d4017b63c911be1

    • SHA256

      c40edab8baf3bdc95a8a7aa405c8d6318fb4aa0dcdf6eb89b9400767dfb53c0e

    • SHA512

      7dc67982a874e96bdd2af44d05144b402460bf6ce6cab6b297cc6e64017acc7b2cd459e0907e6cecd799997b611f965bf2f9058cea630e942b28617add4cfb59

    • SSDEEP

      6144:91OgDPdkBAFZWjadD4sa5G7TqsV4A8Xe7u2SAR2GMkIeVqo4Td+M8:91OgLdaY7Vb8ODsGfT3Dl

    Score
    7/10
    adwarediscoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

      stealeradware
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks