aefeb4d6f141cc7d18c1d69e5c76d3101526d0ed38e4b69217bb1db8e84f0345 | Triage

Sharing

General

Target

aefeb4d6f141cc7d18c1d69e5c76d3101526d0ed38e4b69217bb1db8e84f0345
Size

160KB
Sample

221123-xmp8laad9y
MD5

158c07777197c42a5bec25f00d6d9b42
SHA1

5c8bf7c92d14c7e1dcf2c98236e40f9b4e1186fa
SHA256

aefeb4d6f141cc7d18c1d69e5c76d3101526d0ed38e4b69217bb1db8e84f0345
SHA512

1028694f45b7dd10f66afa5bbd782ef55d3e2b8450466c7da97ce2115121d82a5e3436fe29490cb2691b4c3cd140da35f5993405491751f82df5b7d00beff962
SSDEEP

3072:A2WAquL7QIKcDo8upA4P+TTyNJnrPth4mT:CaQIaGT4rf

Score

6^/10

adware stealer

Malware Config

Targets

- Target
  
  aefeb4d6f141cc7d18c1d69e5c76d3101526d0ed38e4b69217bb1db8e84f0345
- Size
  
  160KB
- MD5
  
  158c07777197c42a5bec25f00d6d9b42
- SHA1
  
  5c8bf7c92d14c7e1dcf2c98236e40f9b4e1186fa
- SHA256
  
  aefeb4d6f141cc7d18c1d69e5c76d3101526d0ed38e4b69217bb1db8e84f0345
- SHA512
  
  1028694f45b7dd10f66afa5bbd782ef55d3e2b8450466c7da97ce2115121d82a5e3436fe29490cb2691b4c3cd140da35f5993405491751f82df5b7d00beff962
- SSDEEP
  
  3072:A2WAquL7QIKcDo8upA4P+TTyNJnrPth4mT:CaQIaGT4rf
Score

6^/10

adware stealer
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Browser Extensions

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

behavioral2