7f3d1665387f1beea768750ce108aaa26b4abb58bf10e0d08993d7b84cf4ec1b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7f3d1665387f1beea768750ce108aaa26b4abb58bf10e0d08993d7b84cf4ec1b
Size

124KB
Sample

221124-dfxvbaga51
MD5

b3218d06294bb5c55cfebb90ba923dcc
SHA1

9dfac5af2a8766beac9061581442b4b70ee53042
SHA256

7f3d1665387f1beea768750ce108aaa26b4abb58bf10e0d08993d7b84cf4ec1b
SHA512

817470f1154772c847069ca2054ce886159e11916dcc14af45368cd4f7ebacd33f2139b03bbde7008bf4f6b5cdbd051bb4c2f230882d06eac48fbbc3706244da
SSDEEP

3072:EmeDmBqskJ4+19QKe9R9dWsbc3BJVb9ibqDLasfYUTbINsWl9:E8RoQLDWsbAw4LVfbIND9

Score

7^/10

adware discovery stealer

Malware Config

Targets

- Target
  
  7f3d1665387f1beea768750ce108aaa26b4abb58bf10e0d08993d7b84cf4ec1b
- Size
  
  124KB
- MD5
  
  b3218d06294bb5c55cfebb90ba923dcc
- SHA1
  
  9dfac5af2a8766beac9061581442b4b70ee53042
- SHA256
  
  7f3d1665387f1beea768750ce108aaa26b4abb58bf10e0d08993d7b84cf4ec1b
- SHA512
  
  817470f1154772c847069ca2054ce886159e11916dcc14af45368cd4f7ebacd33f2139b03bbde7008bf4f6b5cdbd051bb4c2f230882d06eac48fbbc3706244da
- SSDEEP
  
  3072:EmeDmBqskJ4+19QKe9R9dWsbc3BJVb9ibqDLasfYUTbINsWl9:E8RoQLDWsbAw4LVfbIND9
Score

7^/10

adware discovery stealer
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Browser Extensions

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoverystealer

behavioral2

adwarediscoverystealer