831bcebe608c02152724896d42e7b83b9d8742e8e82d2836dfbac60051695e46 | Triage

Sharing

General

Target

831bcebe608c02152724896d42e7b83b9d8742e8e82d2836dfbac60051695e46
Size

2.0MB
Sample

221121-3m57psbf97
MD5

c496378505c187efc1fe9178b65c42ec
SHA1

055252eda6e361dc11543e3b9735e4ba2475ab31
SHA256

831bcebe608c02152724896d42e7b83b9d8742e8e82d2836dfbac60051695e46
SHA512

aab772b97a7aaa2fa926c58dddf2da1e6b23a786e8381a0091fbd00da13cbea9a37dbf6ee69cf1f63afa7a9e7a069856e06c7a48134a22bf480bf9529b1be19d
SSDEEP

49152:h1OsPCn3b0sdq9tVkWMq0vdovSHhXXruf:h1O3nL0sitVkWX0vVla

Score

8^/10

adware discovery spyware stealer

Malware Config

Targets

- Target
  
  831bcebe608c02152724896d42e7b83b9d8742e8e82d2836dfbac60051695e46
- Size
  
  2.0MB
- MD5
  
  c496378505c187efc1fe9178b65c42ec
- SHA1
  
  055252eda6e361dc11543e3b9735e4ba2475ab31
- SHA256
  
  831bcebe608c02152724896d42e7b83b9d8742e8e82d2836dfbac60051695e46
- SHA512
  
  aab772b97a7aaa2fa926c58dddf2da1e6b23a786e8381a0091fbd00da13cbea9a37dbf6ee69cf1f63afa7a9e7a069856e06c7a48134a22bf480bf9529b1be19d
- SSDEEP
  
  49152:h1OsPCn3b0sdq9tVkWMq0vdovSHhXXruf:h1O3nL0sitVkWX0vVla
Score

8^/10

adware discovery spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops Chrome extension
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Browser Extensions

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoveryspywarestealer

behavioral2

adwarediscoveryspywarestealer