d8f70babbe6bafa7c111c70d4a3e9e6b7c2d5bc23d5b8a0ba194f3b9caf8dabb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d8f70babbe6bafa7c111c70d4a3e9e6b7c2d5bc23d5b8a0ba194f3b9caf8dabb
Size

124KB
Sample

220919-rkxxrscdg3
MD5

cf2b1994fe4207fa17a02621a9b67857
SHA1

4f6caf7d61cd7c3a8815b399609de35a049928be
SHA256

d8f70babbe6bafa7c111c70d4a3e9e6b7c2d5bc23d5b8a0ba194f3b9caf8dabb
SHA512

1574ecbc155b65dfbebb9329534879a0b8e70ac113c034220f6ccad7b5510da9e05257dd8411bf1e897f30438becfe79a7d4cc137143e978d05fe3c5657d28fc
SSDEEP

3072:EmeDmBqskJ5iwVR5pGIvGgBAkvJM2g3XDYTfP/FB4:E8wiARvSIJyXDEfVB4

Score

7^/10

adware discovery stealer

Malware Config

Targets

- Target
  
  d8f70babbe6bafa7c111c70d4a3e9e6b7c2d5bc23d5b8a0ba194f3b9caf8dabb
- Size
  
  124KB
- MD5
  
  cf2b1994fe4207fa17a02621a9b67857
- SHA1
  
  4f6caf7d61cd7c3a8815b399609de35a049928be
- SHA256
  
  d8f70babbe6bafa7c111c70d4a3e9e6b7c2d5bc23d5b8a0ba194f3b9caf8dabb
- SHA512
  
  1574ecbc155b65dfbebb9329534879a0b8e70ac113c034220f6ccad7b5510da9e05257dd8411bf1e897f30438becfe79a7d4cc137143e978d05fe3c5657d28fc
- SSDEEP
  
  3072:EmeDmBqskJ5iwVR5pGIvGgBAkvJM2g3XDYTfP/FB4:E8wiARvSIJyXDEfVB4
Score

7^/10

adware discovery stealer
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Browser Extensions

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoverystealer

behavioral2

adwarediscoverystealer