5d3eac49e2315d84808c1d96bb782ba92481e960621b98c30b578bf2e9af815c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5d3eac49e2315d84808c1d96bb782ba92481e960621b98c30b578bf2e9af815c
Size

124KB
Sample

221124-df3esscg76
MD5

7fd16b5f86d63d6f9e53122a8336e403
SHA1

fd1b021e1e5446c38af1adb1252c03885910319c
SHA256

5d3eac49e2315d84808c1d96bb782ba92481e960621b98c30b578bf2e9af815c
SHA512

00df7392245f3b0df392794f1061d14994216f2123c28848f33b6b5e49ef4ebb5bae51aa85e9a25ba0c5c64cf865d7619603a70ba143368d8be0c357ce0bb8a5
SSDEEP

1536:Ejae1wYxmBBoskJWcR0nwj3QGOcoSWk2cPfnkK9Z8JXI1OkJMUuS8Sba4mjcmcVv:EmeDmBqskJfR06AnTGKWq/YRse2mye

Score

7^/10

adware discovery stealer

Malware Config

Targets

- Target
  
  5d3eac49e2315d84808c1d96bb782ba92481e960621b98c30b578bf2e9af815c
- Size
  
  124KB
- MD5
  
  7fd16b5f86d63d6f9e53122a8336e403
- SHA1
  
  fd1b021e1e5446c38af1adb1252c03885910319c
- SHA256
  
  5d3eac49e2315d84808c1d96bb782ba92481e960621b98c30b578bf2e9af815c
- SHA512
  
  00df7392245f3b0df392794f1061d14994216f2123c28848f33b6b5e49ef4ebb5bae51aa85e9a25ba0c5c64cf865d7619603a70ba143368d8be0c357ce0bb8a5
- SSDEEP
  
  1536:Ejae1wYxmBBoskJWcR0nwj3QGOcoSWk2cPfnkK9Z8JXI1OkJMUuS8Sba4mjcmcVv:EmeDmBqskJfR06AnTGKWq/YRse2mye
Score

7^/10

adware discovery stealer
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Browser Extensions

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoverystealer

behavioral2

adwarediscoverystealer