cb83b4209be9860026907e98e13882cc2bd83c7268751c7a48930eeeb562f1d8 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

1

cb83b4209b...d8.exe

windows7-x64

7

cb83b4209b...d8.exe

windows10-2004-x64

7

Sharing

General

Target

cb83b4209be9860026907e98e13882cc2bd83c7268751c7a48930eeeb562f1d8
Size

179KB
Sample

220918-3tt31sfef4
MD5

fc150e461355f607bcda8439f4e8ac6c
SHA1

fd8cdf427c8e6d064789d4c7ece1a3da47fb567c
SHA256

cb83b4209be9860026907e98e13882cc2bd83c7268751c7a48930eeeb562f1d8
SHA512

578cd5b6fcfa7654152fef797649b602045e7f824f9acb421a6a590f13a7580a286b36545bc83a59f316405d36ee6b09743609a84dac49bc34823d7435f1e8f3
SSDEEP

3072:sFPzNvmJoIKpcDggzKtmPZzCKQsf4PIaNrr/yWTo9CjNxlqr9AjiRSzwWI8ZNq4J:sbcY0KtAYKQsirNrTyW89EaEiRSzwWI0

Score

7^/10

adware discovery persistence stealer

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

cb83b4209be9860026907e98e13882cc2bd83c7268751c7a48930eeeb562f1d8.exe

Resource

win7-20220812-en

adware discovery persistence stealer

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral2

Sample

cb83b4209be9860026907e98e13882cc2bd83c7268751c7a48930eeeb562f1d8.exe

Resource

win10v2004-20220812-en

adware discovery persistence stealer

windows10-2004-x64

11 signatures

150 seconds

Malware Config

Targets

- Target
  
  cb83b4209be9860026907e98e13882cc2bd83c7268751c7a48930eeeb562f1d8
- Size
  
  179KB
- MD5
  
  fc150e461355f607bcda8439f4e8ac6c
- SHA1
  
  fd8cdf427c8e6d064789d4c7ece1a3da47fb567c
- SHA256
  
  cb83b4209be9860026907e98e13882cc2bd83c7268751c7a48930eeeb562f1d8
- SHA512
  
  578cd5b6fcfa7654152fef797649b602045e7f824f9acb421a6a590f13a7580a286b36545bc83a59f316405d36ee6b09743609a84dac49bc34823d7435f1e8f3
- SSDEEP
  
  3072:sFPzNvmJoIKpcDggzKtmPZzCKQsf4PIaNrr/yWTo9CjNxlqr9AjiRSzwWI8ZNq4J:sbcY0KtAYKQsirNrTyW89EaEiRSzwWI0
Score

7^/10

adware discovery persistence stealer
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Browser Extensions

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoverypersistencestealer

behavioral2

adwarediscoverypersistencestealer

© 2018-2025

Terms | Privacy