2ae83fb95c7008c74d2501abef466d1d43d87df9c86a1f7f9a332d8ce4747296

General

Target

2ae83fb95c7008c74d2501abef466d1d43d87df9c86a1f7f9a332d8ce4747296
Size

350KB
Sample

221106-exhmdsefgq
MD5

13797d259eae7789cb3c0284f0260b10
SHA1

bfca5302ac52dbec668392e3572f06ca66b5e9ab
SHA256

2ae83fb95c7008c74d2501abef466d1d43d87df9c86a1f7f9a332d8ce4747296
SHA512

0bc3d206fb02eb7da603457ceff2f5855aa2d88bfddb93ccd4320095b0b07644cb75dd561a82554722266f0b4a3b9c4971eaa459957ba0302237ebef5d0e5a54
SSDEEP

6144:9yXu7IEBSsQ9ElMwm60lmqs7MTRGA3h3GVqdppJXEGhBukJF/KAwxFUOWdEmh:93BdQLL4BE93NGVYZX9BukJlwxSJdEm

Score

8^/10

Malware Config

Targets

- Target
  
  2ae83fb95c7008c74d2501abef466d1d43d87df9c86a1f7f9a332d8ce4747296
- Size
  
  350KB
- MD5
  
  13797d259eae7789cb3c0284f0260b10
- SHA1
  
  bfca5302ac52dbec668392e3572f06ca66b5e9ab
- SHA256
  
  2ae83fb95c7008c74d2501abef466d1d43d87df9c86a1f7f9a332d8ce4747296
- SHA512
  
  0bc3d206fb02eb7da603457ceff2f5855aa2d88bfddb93ccd4320095b0b07644cb75dd561a82554722266f0b4a3b9c4971eaa459957ba0302237ebef5d0e5a54
- SSDEEP
  
  6144:9yXu7IEBSsQ9ElMwm60lmqs7MTRGA3h3GVqdppJXEGhBukJF/KAwxFUOWdEmh:93BdQLL4BE93NGVYZX9BukJlwxSJdEm
Score

8^/10

adware discovery exploit persistence stealer upx
- Drops file in Drivers directory
- Possible privilege escalation attempt
  exploit
- Sets service image path in registry
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Deletes itself
- Modifies file permissions
  discovery
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Browser Extensions

1

T1176

Registry Run Keys / Startup Folder

1

T1060

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Drops file in Drivers directory

Possible privilege escalation attempt

Sets service image path in registry

UPX packed file

Deletes itself

Modifies file permissions

Installs/modifies Browser Helper Object

Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks

static1

behavioral1

behavioral2