98daaca9a7b3eca1c93cdbf577c4978d74adecbcdbcc986bde113de4953c6a23 | Triage

Sharing

General

Target

98daaca9a7b3eca1c93cdbf577c4978d74adecbcdbcc986bde113de4953c6a23
Size

4.4MB
Sample

221124-1q5n8sbg36
MD5

f85d6eec0108d9301407a305097df646
SHA1

0cfb4d3b258cd9cac0c84dcfede5bfebdd3bf082
SHA256

98daaca9a7b3eca1c93cdbf577c4978d74adecbcdbcc986bde113de4953c6a23
SHA512

3b8e6b8e922976f553551d8dbc9153a7fad8baea826e69411a3b2cc71e93d9ddc18f123a46037ddd8f1d616bd9fae09522b241abf099ec2b492564df97983b3c
SSDEEP

49152:ehuK4jmWrCBDT+qLmxup48dGKvghxfki1zxOCrZguQ/jSlM/Zf0weeDNxzC:E2mWrKyqCKc5QWZgpj8MNtLNxz

Score

8^/10

adware discovery persistence stealer

Malware Config

Targets

- Target
  
  98daaca9a7b3eca1c93cdbf577c4978d74adecbcdbcc986bde113de4953c6a23
- Size
  
  4.4MB
- MD5
  
  f85d6eec0108d9301407a305097df646
- SHA1
  
  0cfb4d3b258cd9cac0c84dcfede5bfebdd3bf082
- SHA256
  
  98daaca9a7b3eca1c93cdbf577c4978d74adecbcdbcc986bde113de4953c6a23
- SHA512
  
  3b8e6b8e922976f553551d8dbc9153a7fad8baea826e69411a3b2cc71e93d9ddc18f123a46037ddd8f1d616bd9fae09522b241abf099ec2b492564df97983b3c
- SSDEEP
  
  49152:ehuK4jmWrCBDT+qLmxup48dGKvghxfki1zxOCrZguQ/jSlM/Zf0weeDNxzC:E2mWrKyqCKc5QWZgpj8MNtLNxz
Score

8^/10

adware discovery persistence stealer
- Registers COM server for autorun
  persistence
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Browser Extensions

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoverypersistencestealer

behavioral2