8e6d533e28048ceaa8e3052a8695cd68e5d97bdf80a1371b147228d9fc14a848 | Triage

Sharing

General

Target

8e6d533e28048ceaa8e3052a8695cd68e5d97bdf80a1371b147228d9fc14a848
Size

4.3MB
Sample

221124-2anlfsgb2y
MD5

1039dc04749d0780a42d15c8b211df54
SHA1

d450bc1bb7d5a203ce428235f1ca2eec3c343c48
SHA256

8e6d533e28048ceaa8e3052a8695cd68e5d97bdf80a1371b147228d9fc14a848
SHA512

43a45550d209feec636c0221bcf09c985f4a43508ef7e43416d4f1188394887ceb8623877c2a83636563c37445c1fccf976dec47a26cd251d4915f28f8d1101f
SSDEEP

49152:iSuK4jZ0WHCpNqLmxup4ndGKvghxfki17c7SKNB+lyzEJ3jsr:B2Z0NvqxKc27SKCYiTs

Score

8^/10

adware discovery persistence stealer

Malware Config

Targets

- Target
  
  8e6d533e28048ceaa8e3052a8695cd68e5d97bdf80a1371b147228d9fc14a848
- Size
  
  4.3MB
- MD5
  
  1039dc04749d0780a42d15c8b211df54
- SHA1
  
  d450bc1bb7d5a203ce428235f1ca2eec3c343c48
- SHA256
  
  8e6d533e28048ceaa8e3052a8695cd68e5d97bdf80a1371b147228d9fc14a848
- SHA512
  
  43a45550d209feec636c0221bcf09c985f4a43508ef7e43416d4f1188394887ceb8623877c2a83636563c37445c1fccf976dec47a26cd251d4915f28f8d1101f
- SSDEEP
  
  49152:iSuK4jZ0WHCpNqLmxup4ndGKvghxfki17c7SKNB+lyzEJ3jsr:B2Z0NvqxKc27SKCYiTs
Score

8^/10

adware discovery persistence stealer
- Registers COM server for autorun
  persistence
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Browser Extensions

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoverypersistencestealer

behavioral2

adwarediscoverypersistencestealer