a7f76d41e7d77c69dfcf54779a96f07918c2ca6496e5989f49d3897dcbc50e04 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a7f76d41e7d77c69dfcf54779a96f07918c2ca6496e5989f49d3897dcbc50e04
Size

124KB
Sample

220919-rkxl1acdg2
MD5

f5787a907f04b150dbd6ec9a60984dfe
SHA1

7f795f6d426f87349fbd66a38dccf7b461cff413
SHA256

a7f76d41e7d77c69dfcf54779a96f07918c2ca6496e5989f49d3897dcbc50e04
SHA512

1990abb345b0602245be48f28b07e2bed8ae22802d0ee21de97d260d9f94f67617c4a0907eff0863849ba28ac7a039450a9dea09f6d6d51a74b1c5bf80ec516d
SSDEEP

3072:EmeDmBqskJPkV/bh/BFYjkQMwqLW4RB/t/v:E8tV/RBF4CwWBv

Score

7^/10

adware discovery stealer

Malware Config

Targets

- Target
  
  a7f76d41e7d77c69dfcf54779a96f07918c2ca6496e5989f49d3897dcbc50e04
- Size
  
  124KB
- MD5
  
  f5787a907f04b150dbd6ec9a60984dfe
- SHA1
  
  7f795f6d426f87349fbd66a38dccf7b461cff413
- SHA256
  
  a7f76d41e7d77c69dfcf54779a96f07918c2ca6496e5989f49d3897dcbc50e04
- SHA512
  
  1990abb345b0602245be48f28b07e2bed8ae22802d0ee21de97d260d9f94f67617c4a0907eff0863849ba28ac7a039450a9dea09f6d6d51a74b1c5bf80ec516d
- SSDEEP
  
  3072:EmeDmBqskJPkV/bh/BFYjkQMwqLW4RB/t/v:E8tV/RBF4CwWBv
Score

7^/10

adware discovery stealer
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Browser Extensions

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoverystealer

behavioral2

adwarediscoverystealer