f14b6c8707a9705a57d554847e414191738d67f53b572eb7cbd4bf45a0cf6676 | Triage

Submit
Reports

Overview

overview

7

Static

static

1

f14b6c8707...76.exe

windows7-x64

7

f14b6c8707...76.exe

windows10-2004-x64

7

Sharing

General

Target

f14b6c8707a9705a57d554847e414191738d67f53b572eb7cbd4bf45a0cf6676
Size

200KB
Sample

221123-m6rwesbb2x
MD5

ad2d269de4b6e20e3c5f05530abb8bd8
SHA1

2fcfe67cd378160bb8ed4e3160ce80ccc08d6822
SHA256

f14b6c8707a9705a57d554847e414191738d67f53b572eb7cbd4bf45a0cf6676
SHA512

45d8ddfdea7adcb44377435d88bc0dd331798bb400f9e458bee58dbe3d7077430a2553e1f12ca102214527eded7c0516f024144414ec0c3abfde597a2503988a
SSDEEP

6144:TlzJH5O7SWi9UpSGusPmwMa87XGS/EocnzvWBU:/s51HPzmXGmzEvW2

Score

7^/10

adware discovery persistence stealer

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

f14b6c8707a9705a57d554847e414191738d67f53b572eb7cbd4bf45a0cf6676.exe

Resource

win7-20220812-en

adware discovery persistence stealer

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral2

Sample

f14b6c8707a9705a57d554847e414191738d67f53b572eb7cbd4bf45a0cf6676.exe

Resource

win10v2004-20221111-en

windows10-2004-x64

2 signatures

150 seconds

Malware Config

Targets

- Target
  
  f14b6c8707a9705a57d554847e414191738d67f53b572eb7cbd4bf45a0cf6676
- Size
  
  200KB
- MD5
  
  ad2d269de4b6e20e3c5f05530abb8bd8
- SHA1
  
  2fcfe67cd378160bb8ed4e3160ce80ccc08d6822
- SHA256
  
  f14b6c8707a9705a57d554847e414191738d67f53b572eb7cbd4bf45a0cf6676
- SHA512
  
  45d8ddfdea7adcb44377435d88bc0dd331798bb400f9e458bee58dbe3d7077430a2553e1f12ca102214527eded7c0516f024144414ec0c3abfde597a2503988a
- SSDEEP
  
  6144:TlzJH5O7SWi9UpSGusPmwMa87XGS/EocnzvWBU:/s51HPzmXGmzEvW2
Score

7^/10

adware discovery persistence stealer
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Browser Extensions

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

adwarediscoverypersistencestealer

behavioral2

© 2018-2024

Terms | Privacy