cff2e64030ad3444b08b0bd87e73df9a34ea285ec864799f295d3c493b86bd35 | Triage

Sharing

General

Target

cff2e64030ad3444b08b0bd87e73df9a34ea285ec864799f295d3c493b86bd35
Size

835KB
Sample

220919-bhg6jahhf2
MD5

5120ecde863e2e96b0c1caa708cbdf4c
SHA1

7193fd4b3ad07a841d49478074955eba35b4b519
SHA256

cff2e64030ad3444b08b0bd87e73df9a34ea285ec864799f295d3c493b86bd35
SHA512

8531757d9a8803e5d7029fc92c137627053bc27c177773a57b0e355930af06252a92d535a44746285114ed9b7b9d9b70391020dbe3343a1ea48f1adaddc625ca
SSDEEP

24576:JS0EjtdXknwpdYesDuw50YzOJhzC/xagO705T3WnpT:E0EjtdXknwpdYEI0YzIzCJaH05T+T

Score

7^/10

adware persistence stealer

Malware Config

Targets

- Target
  
  cff2e64030ad3444b08b0bd87e73df9a34ea285ec864799f295d3c493b86bd35
- Size
  
  835KB
- MD5
  
  5120ecde863e2e96b0c1caa708cbdf4c
- SHA1
  
  7193fd4b3ad07a841d49478074955eba35b4b519
- SHA256
  
  cff2e64030ad3444b08b0bd87e73df9a34ea285ec864799f295d3c493b86bd35
- SHA512
  
  8531757d9a8803e5d7029fc92c137627053bc27c177773a57b0e355930af06252a92d535a44746285114ed9b7b9d9b70391020dbe3343a1ea48f1adaddc625ca
- SSDEEP
  
  24576:JS0EjtdXknwpdYesDuw50YzOJhzC/xagO705T3WnpT:E0EjtdXknwpdYEI0YzIzCJaH05T+T
Score

7^/10

adware persistence stealer
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Browser Extensions

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarepersistencestealer

behavioral2

adwarepersistencestealer