28d692cf36f38561d0384327939686cf055a7ba156d14e8b6d67b9c93219060b | Triage

Sharing

General

Target

28d692cf36f38561d0384327939686cf055a7ba156d14e8b6d67b9c93219060b
Size

128KB
Sample

220919-lz59ssfehk
MD5

7e09f705cdb219b222cdb7eb54a31af3
SHA1

59046b3d99b595c829c7f0eabad78d27ccffca31
SHA256

28d692cf36f38561d0384327939686cf055a7ba156d14e8b6d67b9c93219060b
SHA512

4952af94077077d4d98b66315610cf832f975a99f5bb9daa02ad45e75b899b4709e987a6f2d6fbca9c30c3af37d4c407761d78f2fec25e75ce2f8d0762fe282d
SSDEEP

1536:Ejae1wYxmBBoskJWzCpqaMi1qbYJcIakJiQc7SeXWsGkaofst0oTITgkXs4QtLW:EmeDmBqskJRpqaP/cK5cBOofMT4gk3B

Score

7^/10

adware discovery stealer

Malware Config

Targets

- Target
  
  28d692cf36f38561d0384327939686cf055a7ba156d14e8b6d67b9c93219060b
- Size
  
  128KB
- MD5
  
  7e09f705cdb219b222cdb7eb54a31af3
- SHA1
  
  59046b3d99b595c829c7f0eabad78d27ccffca31
- SHA256
  
  28d692cf36f38561d0384327939686cf055a7ba156d14e8b6d67b9c93219060b
- SHA512
  
  4952af94077077d4d98b66315610cf832f975a99f5bb9daa02ad45e75b899b4709e987a6f2d6fbca9c30c3af37d4c407761d78f2fec25e75ce2f8d0762fe282d
- SSDEEP
  
  1536:Ejae1wYxmBBoskJWzCpqaMi1qbYJcIakJiQc7SeXWsGkaofst0oTITgkXs4QtLW:EmeDmBqskJRpqaP/cK5cBOofMT4gk3B
Score

7^/10

adware discovery stealer
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Browser Extensions

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoverystealer

behavioral2

adwarediscoverystealer