3ab6974f1dc039b664885638f747e4e7d722d7fc5fc30ddbea491584241cfa07

General

Target

3ab6974f1dc039b664885638f747e4e7d722d7fc5fc30ddbea491584241cfa07
Size

350KB
Sample

221003-3gzsqscbfp
MD5

61dbb42d14e7d603d236c60288685ad0
SHA1

b0a58d549087d8824a5f4f71e46506a96a5cefe2
SHA256

3ab6974f1dc039b664885638f747e4e7d722d7fc5fc30ddbea491584241cfa07
SHA512

fa7b66cfba7304f1b6a5b2ef2b1ea7d9fcb506eb3957cb61694b6f22c4b17d8ff6c18bfb46d123e4716f75fad3bcec1dd638af4b3ae55c2f8b954d31c75045dc
SSDEEP

6144:oyXu7IEBSsQ9ElMwm60lmqs7MTRGA3h3GVqdppJXEGhBukJF/KAwxFUOWdEmh:o3BdQLL4BE93NGVYZX9BukJlwxSJdEm

Score

8^/10

Malware Config

Targets

- Target
  
  3ab6974f1dc039b664885638f747e4e7d722d7fc5fc30ddbea491584241cfa07
- Size
  
  350KB
- MD5
  
  61dbb42d14e7d603d236c60288685ad0
- SHA1
  
  b0a58d549087d8824a5f4f71e46506a96a5cefe2
- SHA256
  
  3ab6974f1dc039b664885638f747e4e7d722d7fc5fc30ddbea491584241cfa07
- SHA512
  
  fa7b66cfba7304f1b6a5b2ef2b1ea7d9fcb506eb3957cb61694b6f22c4b17d8ff6c18bfb46d123e4716f75fad3bcec1dd638af4b3ae55c2f8b954d31c75045dc
- SSDEEP
  
  6144:oyXu7IEBSsQ9ElMwm60lmqs7MTRGA3h3GVqdppJXEGhBukJF/KAwxFUOWdEmh:o3BdQLL4BE93NGVYZX9BukJlwxSJdEm
Score

8^/10

adware discovery exploit persistence stealer upx
- Drops file in Drivers directory
- Possible privilege escalation attempt
  exploit
- Sets service image path in registry
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Deletes itself
- Modifies file permissions
  discovery
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Browser Extensions

1

T1176

Registry Run Keys / Startup Folder

1

T1060

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Drops file in Drivers directory

Possible privilege escalation attempt

Sets service image path in registry

UPX packed file

Deletes itself

Modifies file permissions

Installs/modifies Browser Helper Object

Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks

static1

behavioral1

behavioral2