d627414d31722551d6cc7fd8c2261b9c889a75a7b0b63f6e3520bdec017dcfc0 | Triage

Sharing

General

Target

d627414d31722551d6cc7fd8c2261b9c889a75a7b0b63f6e3520bdec017dcfc0
Size

2.1MB
Sample

221123-s8w6tadc92
MD5

c69e67939a92d6062f46c7ad9d40ba13
SHA1

93f6bc2992b8d2f6c18cdc268b8591766a8ec209
SHA256

d627414d31722551d6cc7fd8c2261b9c889a75a7b0b63f6e3520bdec017dcfc0
SHA512

6da80e19e1895dfecaabfe7399fd6e1726b347eb8577c85639aa73fab295843b791b137864f762b92ccbd1da8185fde22955b6409d9101cdab539870f96b535f
SSDEEP

49152:h1OscAxPqbaJ0CqWfTAeP20icuFMDoiXrBSdCIlE05XwjXr3C:h1OxAxib7CqWfTAeP2vaDhtSdpP

Score

8^/10

adware discovery spyware stealer

Malware Config

Targets

- Target
  
  d627414d31722551d6cc7fd8c2261b9c889a75a7b0b63f6e3520bdec017dcfc0
- Size
  
  2.1MB
- MD5
  
  c69e67939a92d6062f46c7ad9d40ba13
- SHA1
  
  93f6bc2992b8d2f6c18cdc268b8591766a8ec209
- SHA256
  
  d627414d31722551d6cc7fd8c2261b9c889a75a7b0b63f6e3520bdec017dcfc0
- SHA512
  
  6da80e19e1895dfecaabfe7399fd6e1726b347eb8577c85639aa73fab295843b791b137864f762b92ccbd1da8185fde22955b6409d9101cdab539870f96b535f
- SSDEEP
  
  49152:h1OscAxPqbaJ0CqWfTAeP20icuFMDoiXrBSdCIlE05XwjXr3C:h1OxAxib7CqWfTAeP2vaDhtSdpP
Score

8^/10

adware discovery spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops Chrome extension
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Browser Extensions

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoveryspywarestealer

behavioral2