892439e07ed30b8161053e621caf5543961c2e8ac56916a3bcc24b29c5a09d29 | Triage

Sharing

General

Target

892439e07ed30b8161053e621caf5543961c2e8ac56916a3bcc24b29c5a09d29
Size

4.3MB
Sample

221124-2l8qrsgh3y
MD5

056f07b493fde07243a6a942bc54379c
SHA1

13f89020700aa9e7366fe81ac9cc4b36a623f6c7
SHA256

892439e07ed30b8161053e621caf5543961c2e8ac56916a3bcc24b29c5a09d29
SHA512

414511cdcf1e125dc7e1f895fc2c26db900a09fb57bccd9f4f51a64dae3d5ca3c8c70697d5f0f9cac676c2b5cb51ec440786a376ecdc99522342210ff24d7707
SSDEEP

49152:3yuKYDZ0WnCJ+KLmxup4KdGKvghxfki1yPXGIjQPyoC3yE/Ac5mWxnmzL:62Z0toKwKcAP2iQ6oWNAxen0

Score

8^/10

adware discovery persistence stealer

Malware Config

Targets

- Target
  
  892439e07ed30b8161053e621caf5543961c2e8ac56916a3bcc24b29c5a09d29
- Size
  
  4.3MB
- MD5
  
  056f07b493fde07243a6a942bc54379c
- SHA1
  
  13f89020700aa9e7366fe81ac9cc4b36a623f6c7
- SHA256
  
  892439e07ed30b8161053e621caf5543961c2e8ac56916a3bcc24b29c5a09d29
- SHA512
  
  414511cdcf1e125dc7e1f895fc2c26db900a09fb57bccd9f4f51a64dae3d5ca3c8c70697d5f0f9cac676c2b5cb51ec440786a376ecdc99522342210ff24d7707
- SSDEEP
  
  49152:3yuKYDZ0WnCJ+KLmxup4KdGKvghxfki1yPXGIjQPyoC3yE/Ac5mWxnmzL:62Z0toKwKcAP2iQ6oWNAxen0
Score

8^/10

adware discovery persistence stealer
- Registers COM server for autorun
  persistence
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Browser Extensions

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoverypersistencestealer

behavioral2