8f57efc8d38709089aa1efc597ba6d275c4cff6f8590daef62253d5b8e18cdfc

General

Target

8f57efc8d38709089aa1efc597ba6d275c4cff6f8590daef62253d5b8e18cdfc
Size

950KB
Sample

221124-1853qacg99
MD5

ddc768346d02d4480cd5b2abb87c2ed1
SHA1

86401ed9da9be11850e2cc2f521252a34c124fa1
SHA256

8f57efc8d38709089aa1efc597ba6d275c4cff6f8590daef62253d5b8e18cdfc
SHA512

1402f552153ccfe08fc8001c6c3c9a79833d34dfe3ac973fcc649fca98089d717c3e125c08b8f904fe591eb9230652ace7bf10e1bfc58500389cbd5f6bac9ae4
SSDEEP

12288:vZ3AL//UzDAqZBx+NW8vAsUXvWT/ZHTkpb3MVYi23qeYti:vZw7TYP+NzAC723q5i

Score

8^/10

Malware Config

Targets

- Target
  
  8f57efc8d38709089aa1efc597ba6d275c4cff6f8590daef62253d5b8e18cdfc
- Size
  
  950KB
- MD5
  
  ddc768346d02d4480cd5b2abb87c2ed1
- SHA1
  
  86401ed9da9be11850e2cc2f521252a34c124fa1
- SHA256
  
  8f57efc8d38709089aa1efc597ba6d275c4cff6f8590daef62253d5b8e18cdfc
- SHA512
  
  1402f552153ccfe08fc8001c6c3c9a79833d34dfe3ac973fcc649fca98089d717c3e125c08b8f904fe591eb9230652ace7bf10e1bfc58500389cbd5f6bac9ae4
- SSDEEP
  
  12288:vZ3AL//UzDAqZBx+NW8vAsUXvWT/ZHTkpb3MVYi23qeYti:vZw7TYP+NzAC723q5i
Score

8^/10

adware discovery exploit persistence stealer upx
- Drops file in Drivers directory
- Executes dropped EXE
- Possible privilege escalation attempt
  exploit
- Sets service image path in registry
  persistence
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Deletes itself
- Loads dropped DLL
- Modifies file permissions
  discovery
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Browser Extensions

1

T1176

Registry Run Keys / Startup Folder

1

T1060

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Drops file in Drivers directory

Executes dropped EXE

Possible privilege escalation attempt

Sets service image path in registry

UPX packed file

Deletes itself

Loads dropped DLL

Modifies file permissions

Installs/modifies Browser Helper Object

Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks

static1

behavioral1

behavioral2