0f23fb3a285f62dde8c51798e3a65ef673518589f9698529820be9cabe87863c | Triage

Submit
Reports

Overview

overview

9

Static

static

9

0f23fb3a28...3c.dll

windows7-x64

8

0f23fb3a28...3c.dll

windows10-2004-x64

8

Sharing

General

Target

0f23fb3a285f62dde8c51798e3a65ef673518589f9698529820be9cabe87863c
Size

125KB
Sample

221106-rzcv5shgcr
MD5

09b5d1f8c7fac32963dabc7a0649a969
SHA1

2cdb88b7383f86d9b63c8c6e73bcc27bf6f5b75d
SHA256

0f23fb3a285f62dde8c51798e3a65ef673518589f9698529820be9cabe87863c
SHA512

90a2fbc9e92627a12c26ea9df9046ab22cef3301dea164951f0c7a2d2a43ee0d49729ec3feb58a4612841634c3bee902669c680c67f66fdddc39ec474fec73c2
SSDEEP

3072:8mC5IE6H3hb2SB43Dp70CEykz7eonW2okD3OXhT/2YBKa:bTPBe70fbzzljWhT3t

Score

9^/10

adware persistence stealer upx

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

0f23fb3a285f62dde8c51798e3a65ef673518589f9698529820be9cabe87863c.dll

Resource

win7-20220901-en

adware persistence stealer upx

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

0f23fb3a285f62dde8c51798e3a65ef673518589f9698529820be9cabe87863c.dll

Resource

win10v2004-20220812-en

adware persistence stealer upx

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  0f23fb3a285f62dde8c51798e3a65ef673518589f9698529820be9cabe87863c
- Size
  
  125KB
- MD5
  
  09b5d1f8c7fac32963dabc7a0649a969
- SHA1
  
  2cdb88b7383f86d9b63c8c6e73bcc27bf6f5b75d
- SHA256
  
  0f23fb3a285f62dde8c51798e3a65ef673518589f9698529820be9cabe87863c
- SHA512
  
  90a2fbc9e92627a12c26ea9df9046ab22cef3301dea164951f0c7a2d2a43ee0d49729ec3feb58a4612841634c3bee902669c680c67f66fdddc39ec474fec73c2
- SSDEEP
  
  3072:8mC5IE6H3hb2SB43Dp70CEykz7eonW2okD3OXhT/2YBKa:bTPBe70fbzzljWhT3t
Score

8^/10

adware persistence stealer upx
- Modifies Shared Task Scheduler registry keys
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Browser Extensions

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarepersistencestealerupx

behavioral2

adwarepersistencestealerupx

© 2018-2024

Terms | Privacy