598bfbf7fd5ad60b462a7eb491be26b77b0a5722d9f4a8e6ec62f631430becd9 | Triage

Sharing

General

Target

598bfbf7fd5ad60b462a7eb491be26b77b0a5722d9f4a8e6ec62f631430becd9
Size

124KB
Sample

221124-gvgy7agd8y
MD5

d2d6e631c4688c8367c98edadd0ccdaa
SHA1

29755e79dc4d65c7af10e75396e5b12bfac77974
SHA256

598bfbf7fd5ad60b462a7eb491be26b77b0a5722d9f4a8e6ec62f631430becd9
SHA512

f4787ca2d1eacec913de0de50f2e95bf885bde2872d769dac7d799066c3846743d99fbd676d6da74f5b892814222d55db08419b507d3b2ae60068b6b1de486fc
SSDEEP

3072:EmeDmBqskJiz7A6ktfKH4OaDWulXSYH08TsW7sf/w3E:E8JEtfPOraXU8dut

Score

7^/10

adware discovery stealer

Malware Config

Targets

- Target
  
  598bfbf7fd5ad60b462a7eb491be26b77b0a5722d9f4a8e6ec62f631430becd9
- Size
  
  124KB
- MD5
  
  d2d6e631c4688c8367c98edadd0ccdaa
- SHA1
  
  29755e79dc4d65c7af10e75396e5b12bfac77974
- SHA256
  
  598bfbf7fd5ad60b462a7eb491be26b77b0a5722d9f4a8e6ec62f631430becd9
- SHA512
  
  f4787ca2d1eacec913de0de50f2e95bf885bde2872d769dac7d799066c3846743d99fbd676d6da74f5b892814222d55db08419b507d3b2ae60068b6b1de486fc
- SSDEEP
  
  3072:EmeDmBqskJiz7A6ktfKH4OaDWulXSYH08TsW7sf/w3E:E8JEtfPOraXU8dut
Score

7^/10

adware discovery stealer
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Browser Extensions

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoverystealer

behavioral2

adwarediscoverystealer