219c1115ce6b8e36dd2f8581a1a8babf7e60392d0b99bf9011d5167416986a18

Sharing

Copy URL Twitter E-mail

General

Target
Google Chrome.exe
Size 6.4MB
Sample260623-dph3hsav2y
SHA256 219c1115ce6b8e36dd2f8581a1a8babf7e60392d0b99bf9011d5167416986a18
MD5 60081d15db282e70a0c5e29a0f69a6aa
SHA1 9b93ac0efc2b26289a497f5d4bd4f2baf4f0bfe9
SHA512 aadc0223f52958434550aada3c4724febc4d9d3fcb7eba5e4ede1415871a3f64ed5c819372a0336e9bbe97071084259bec0c406302d8af6a18d50b0b729473d6
SSDEEP 196608:cNXUxBFL2V76+DClOToPVIn+LH/+z3+0EOFk+CICnccr:cRUxrL2V76mZTodIn+LH/+zDe8OXr
TLSH
T1B366F08069503195DBDFD1B8B3734E1694216AC05B2BA08EDBECEF51DA37FD10A672C2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Google Chrome.exe
- Size 6.4MB
- SHA256 219c1115ce6b8e36dd2f8581a1a8babf7e60392d0b99bf9011d5167416986a18
- MD5 60081d15db282e70a0c5e29a0f69a6aa
- SHA1 9b93ac0efc2b26289a497f5d4bd4f2baf4f0bfe9
- SHA512 aadc0223f52958434550aada3c4724febc4d9d3fcb7eba5e4ede1415871a3f64ed5c819372a0336e9bbe97071084259bec0c406302d8af6a18d50b0b729473d6
- SSDEEP 196608:cNXUxBFL2V76+DClOToPVIn+LH/+z3+0EOFk+CICnccr:cRUxrL2V76mZTodIn+LH/+zDe8OXr
- TLSH
  T1B366F08069503195DBDFD1B8B3734E1694216AC05B2BA08EDBECEF51DA37FD10A672C2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral10 behavioral11 behavioral12 behavioral13 behavioral14 behavioral2 behavioral3 behavioral4 behavioral5 behavioral6 behavioral7 behavioral8 behavioral9

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Loads dropped DLL

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14