7593070a2d1a658a8939b3fc510fe6dc44a1cfb6d7ef765d46090b0e126e547f | Triage

Sharing

General

Target

7593070a2d1a658a8939b3fc510fe6dc44a1cfb6d7ef765d46090b0e126e547f
Size

2.1MB
Sample

221123-vcb7wagf34
MD5

12dcb0a122bd5b081712338b16406b9b
SHA1

418ac146bd6b57bc51f1c2ee1e22f4f99800e403
SHA256

7593070a2d1a658a8939b3fc510fe6dc44a1cfb6d7ef765d46090b0e126e547f
SHA512

303e15434019d002e49067988f922fbe0e659a4047b65d74c1efecd4a67f8f23e7cfd17cc1077d0e58d0e7db6968e132454a7b8224dc46353190765cfb6a95c3
SSDEEP

49152:h1OsgAxPqbaJ0CqWfTAeP20icuFMDoiXrBSdCIlE05XwjXr36:h1OPAxib7CqWfTAeP2vaDhtSdpN

Score

8^/10

adware discovery spyware stealer

Malware Config

Targets

- Target
  
  7593070a2d1a658a8939b3fc510fe6dc44a1cfb6d7ef765d46090b0e126e547f
- Size
  
  2.1MB
- MD5
  
  12dcb0a122bd5b081712338b16406b9b
- SHA1
  
  418ac146bd6b57bc51f1c2ee1e22f4f99800e403
- SHA256
  
  7593070a2d1a658a8939b3fc510fe6dc44a1cfb6d7ef765d46090b0e126e547f
- SHA512
  
  303e15434019d002e49067988f922fbe0e659a4047b65d74c1efecd4a67f8f23e7cfd17cc1077d0e58d0e7db6968e132454a7b8224dc46353190765cfb6a95c3
- SSDEEP
  
  49152:h1OsgAxPqbaJ0CqWfTAeP20icuFMDoiXrBSdCIlE05XwjXr36:h1OPAxib7CqWfTAeP2vaDhtSdpN
Score

8^/10

adware discovery spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops Chrome extension
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Browser Extensions

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoveryspywarestealer

behavioral2

adwarediscoveryspywarestealer