Overview

overview

8

Static

static

1

absolute-u...r.html

windows7-x64

8

absolute-u...r.html

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    absolute-uninstaller

  • Size

    19KB

  • Sample

    241119-xcjytszdqc

  • MD5

    881516d59f99c92682ee0ddcc4a2cc1c

  • SHA1

    8898534bbf066e3423e6e789d1cd687f8b828154

  • SHA256

    1f70c4c17ff9979900a31ac2ef40c8295d626ef78ce5058aea8759db209fafc1

  • SHA512

    8accc6cb119a99916484fc3ecfbef9aeda5f38ab4b6a42559d654cf1ba64b02d974992b1c9de5c7b0a021c6d2bde890f5d1ab11d7d53fb4dae6301dfedacec39

  • SSDEEP

    384:SIbIll6o/YvdFwyWhNCVy7q9SThLvDokhh:SIIll6yYVFwhhNCaQSThzDokj

Score
8/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      absolute-uninstaller

    • Size

      19KB

    • MD5

      881516d59f99c92682ee0ddcc4a2cc1c

    • SHA1

      8898534bbf066e3423e6e789d1cd687f8b828154

    • SHA256

      1f70c4c17ff9979900a31ac2ef40c8295d626ef78ce5058aea8759db209fafc1

    • SHA512

      8accc6cb119a99916484fc3ecfbef9aeda5f38ab4b6a42559d654cf1ba64b02d974992b1c9de5c7b0a021c6d2bde890f5d1ab11d7d53fb4dae6301dfedacec39

    • SSDEEP

      384:SIbIll6o/YvdFwyWhNCVy7q9SThLvDokhh:SIIll6yYVFwhhNCaQSThzDokj

    Score
    8/10
    discoveryspywarestealer

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks