dfca65084e6afddad130b3f2dc23147af29a4cc2656d16e929a418657c28eccd | Triage

Sharing

General

Target

dfca65084e6afddad130b3f2dc23147af29a4cc2656d16e929a418657c28eccd
Size

124KB
Sample

221123-hmwcaaeb38
MD5

d273b995fcf90662df5ceb03b6749dbc
SHA1

ff501f0dd7bbfa573631299bf8103779c50b0b10
SHA256

dfca65084e6afddad130b3f2dc23147af29a4cc2656d16e929a418657c28eccd
SHA512

6e0ddf6e459ad6b09e4b04bb46b6652af4c02660aec0d580884a3a94c4145295fb66786a802b15420b68666d1bc305b37419214be609de6079471f281eea811c
SSDEEP

3072:EmeDmBqskJTT99Ci2I08tL5Mf9bniSvgOd:E8mT+e08tL8nXvgOd

Score

7^/10

adware discovery stealer

Malware Config

Targets

- Target
  
  dfca65084e6afddad130b3f2dc23147af29a4cc2656d16e929a418657c28eccd
- Size
  
  124KB
- MD5
  
  d273b995fcf90662df5ceb03b6749dbc
- SHA1
  
  ff501f0dd7bbfa573631299bf8103779c50b0b10
- SHA256
  
  dfca65084e6afddad130b3f2dc23147af29a4cc2656d16e929a418657c28eccd
- SHA512
  
  6e0ddf6e459ad6b09e4b04bb46b6652af4c02660aec0d580884a3a94c4145295fb66786a802b15420b68666d1bc305b37419214be609de6079471f281eea811c
- SSDEEP
  
  3072:EmeDmBqskJTT99Ci2I08tL5Mf9bniSvgOd:E8mT+e08tL8nXvgOd
Score

7^/10

adware discovery stealer
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Browser Extensions

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoverystealer

behavioral2

adwarediscoverystealer