85b13a49e110be762759d20508d961286cb6e4e1e5f92da09b77aec613517fed | Triage

Sharing

General

Target

85b13a49e110be762759d20508d961286cb6e4e1e5f92da09b77aec613517fed
Size

124KB
Sample

221123-hmwytahf4y
MD5

dbb5db896c194566883a54ca575d0e69
SHA1

f75ade540e38a49c5130a598fcf7a31218ccc52d
SHA256

85b13a49e110be762759d20508d961286cb6e4e1e5f92da09b77aec613517fed
SHA512

6fdc14bfdf5b285dbd5b6a10fe7cd2eb1cb643ca33455b049eddc1879a97e5f6e334172ad89c4322e60fe636c13a6f43d81b9b6b6ea21dcb921de3ff58510204
SSDEEP

3072:EmeDmBqskJ2m8zJuXdY9YpjioRqslTzCIXgJf+IPz17+z3cD:E8XmuKCY5nxlT3kmQ17+zMD

Score

7^/10

adware discovery stealer

Malware Config

Targets

- Target
  
  85b13a49e110be762759d20508d961286cb6e4e1e5f92da09b77aec613517fed
- Size
  
  124KB
- MD5
  
  dbb5db896c194566883a54ca575d0e69
- SHA1
  
  f75ade540e38a49c5130a598fcf7a31218ccc52d
- SHA256
  
  85b13a49e110be762759d20508d961286cb6e4e1e5f92da09b77aec613517fed
- SHA512
  
  6fdc14bfdf5b285dbd5b6a10fe7cd2eb1cb643ca33455b049eddc1879a97e5f6e334172ad89c4322e60fe636c13a6f43d81b9b6b6ea21dcb921de3ff58510204
- SSDEEP
  
  3072:EmeDmBqskJ2m8zJuXdY9YpjioRqslTzCIXgJf+IPz17+z3cD:E8XmuKCY5nxlT3kmQ17+zMD
Score

7^/10

adware discovery stealer
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Browser Extensions

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoverystealer

behavioral2

adwarediscoverystealer