4cb1e79e7d93a555dff06e65c5d28166efc00d85757b4304b669f5b738a39fde | Triage

Sharing

General

Target

4cb1e79e7d93a555dff06e65c5d28166efc00d85757b4304b669f5b738a39fde
Size

2.1MB
Sample

221123-vtg5fsch4t
MD5

394162705f0958ec6f51facd1b3cc0e0
SHA1

e2b2075b844c3636320cec5f7582458dc80f4833
SHA256

4cb1e79e7d93a555dff06e65c5d28166efc00d85757b4304b669f5b738a39fde
SHA512

489c8507e15b5e14bbf4d1b3ee3eb6b82c6354552094aba9eda296167d5150483cbb7105fce62020ca08f7f7d00c7440dd6756f495d45e5d029b0a0cad9de49e
SSDEEP

49152:h1OswAxPqbaJ0CqWfTAeP20icuFMDoiXrBSdCIlE05XwjXr3k:h1O1Axib7CqWfTAeP2vaDhtSdpt

Score

8^/10

adware discovery spyware stealer

Malware Config

Targets

- Target
  
  4cb1e79e7d93a555dff06e65c5d28166efc00d85757b4304b669f5b738a39fde
- Size
  
  2.1MB
- MD5
  
  394162705f0958ec6f51facd1b3cc0e0
- SHA1
  
  e2b2075b844c3636320cec5f7582458dc80f4833
- SHA256
  
  4cb1e79e7d93a555dff06e65c5d28166efc00d85757b4304b669f5b738a39fde
- SHA512
  
  489c8507e15b5e14bbf4d1b3ee3eb6b82c6354552094aba9eda296167d5150483cbb7105fce62020ca08f7f7d00c7440dd6756f495d45e5d029b0a0cad9de49e
- SSDEEP
  
  49152:h1OswAxPqbaJ0CqWfTAeP20icuFMDoiXrBSdCIlE05XwjXr3k:h1O1Axib7CqWfTAeP2vaDhtSdpt
Score

8^/10

adware discovery spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops Chrome extension
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Browser Extensions

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoveryspywarestealer

behavioral2

adwarediscoveryspywarestealer