b8cb4db77324fdef5be7471a97dc683fc94d34130fa2a908009811951d0581fd | Triage

Submit
Reports

Overview

overview

8

Static

static

b8cb4db773...fd.exe

windows7-x64

8

b8cb4db773...fd.exe

windows10-2004-x64

8

Sharing

General

Target

b8cb4db77324fdef5be7471a97dc683fc94d34130fa2a908009811951d0581fd
Size

252KB
Sample

221107-r2rr3seddj
MD5

0774d0eef30e99c0b9d693928e0f967c
SHA1

cd5cc98b7fde2c7860e69b0a8d19463af713f853
SHA256

b8cb4db77324fdef5be7471a97dc683fc94d34130fa2a908009811951d0581fd
SHA512

f9c8ab1337fe5d8f6a723dfb42aa80b0ce9c6c8f6d7fc8605b8cc3a361dbd7e9876dd0664e355babe4e19ce6334f8416205b7dfa5b2cd94d35d84cda05014e98
SSDEEP

6144:91OgDPdkBAFZWjadD4sDDmuHxRfqSbdpveEgkj4qP:91OgLdaQ6uHvySZheEgkj4K

Score

8^/10

adware discovery spyware stealer

Static task

static1

Behavioral task

behavioral1

Sample

b8cb4db77324fdef5be7471a97dc683fc94d34130fa2a908009811951d0581fd.exe

Resource

win7-20220901-en

adware discovery spyware stealer

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

b8cb4db77324fdef5be7471a97dc683fc94d34130fa2a908009811951d0581fd.exe

Resource

win10v2004-20220812-en

adware discovery spyware stealer

windows10-2004-x64

10 signatures

150 seconds

Malware Config

Targets

- Target
  
  b8cb4db77324fdef5be7471a97dc683fc94d34130fa2a908009811951d0581fd
- Size
  
  252KB
- MD5
  
  0774d0eef30e99c0b9d693928e0f967c
- SHA1
  
  cd5cc98b7fde2c7860e69b0a8d19463af713f853
- SHA256
  
  b8cb4db77324fdef5be7471a97dc683fc94d34130fa2a908009811951d0581fd
- SHA512
  
  f9c8ab1337fe5d8f6a723dfb42aa80b0ce9c6c8f6d7fc8605b8cc3a361dbd7e9876dd0664e355babe4e19ce6334f8416205b7dfa5b2cd94d35d84cda05014e98
- SSDEEP
  
  6144:91OgDPdkBAFZWjadD4sDDmuHxRfqSbdpveEgkj4qP:91OgLdaQ6uHvySZheEgkj4K
Score

8^/10

adware discovery spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Browser Extensions

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Credentials in Files

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoveryspywarestealer

behavioral2

adwarediscoveryspywarestealer

© 2018-2025

Terms | Privacy