c4f829d8b983b2998b0df6ee59e7926450dcdcdbd92d36bf1580fad9eda17fec | Triage

Sharing

General

Target

c4f829d8b983b2998b0df6ee59e7926450dcdcdbd92d36bf1580fad9eda17fec
Size

2.1MB
Sample

221123-2lm43aac24
MD5

304ad28c917650c85a7b7f6f0d4bd99a
SHA1

3482471db8ed8e9b1e6091d740354ebad8fc4cf3
SHA256

c4f829d8b983b2998b0df6ee59e7926450dcdcdbd92d36bf1580fad9eda17fec
SHA512

b39e82d7afd45b8d1224ca2ba1a83c6a0bf2504b9270990e908b3e08929626a945885913994ee4ce0bde43bba700babc49a3daac455e563033ce74834ebf04b7
SSDEEP

49152:h1OsYYIGWkf6jd9YMhKKumq+4oAczj/i6jgvb7GvKSO:h1Obdd9YMhKgq+4fb

Score

8^/10

adware discovery stealer

Malware Config

Targets

- Target
  
  c4f829d8b983b2998b0df6ee59e7926450dcdcdbd92d36bf1580fad9eda17fec
- Size
  
  2.1MB
- MD5
  
  304ad28c917650c85a7b7f6f0d4bd99a
- SHA1
  
  3482471db8ed8e9b1e6091d740354ebad8fc4cf3
- SHA256
  
  c4f829d8b983b2998b0df6ee59e7926450dcdcdbd92d36bf1580fad9eda17fec
- SHA512
  
  b39e82d7afd45b8d1224ca2ba1a83c6a0bf2504b9270990e908b3e08929626a945885913994ee4ce0bde43bba700babc49a3daac455e563033ce74834ebf04b7
- SSDEEP
  
  49152:h1OsYYIGWkf6jd9YMhKKumq+4oAczj/i6jgvb7GvKSO:h1Obdd9YMhKgq+4fb
Score

8^/10

adware discovery stealer
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Browser Extensions

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoverystealer

behavioral2

adwarediscoverystealer