8caa7b8da02ec861239c6b15aa1e6d1782284734fbe210edd54bf4215088835b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8caa7b8da02ec861239c6b15aa1e6d1782284734fbe210edd54bf4215088835b
Size

4.3MB
Sample

221124-hsxsasff33
MD5

fa5c59bc4f3660fd004c97fb39a0e9a3
SHA1

3765154ecaeb3b7f52d3c71b241057e0cb1b46bb
SHA256

8caa7b8da02ec861239c6b15aa1e6d1782284734fbe210edd54bf4215088835b
SHA512

bf3289ba9830c9733fff639af26574c4bd0969e0e20c2374d9dce55ca33333255ef3f2fdd382e75b22abba9e17f5c7d0e2bd78763bdfe542613fb1891d6a6683
SSDEEP

49152:oiOqoT5U2XC5Oarmxup4EdGKvghxfki1r9buOBqFWZ8hpTQd8f:r25UdQayKcrbuOBqFWZspsd8

Score

8^/10

adware discovery persistence stealer

Malware Config

Targets

- Target
  
  8caa7b8da02ec861239c6b15aa1e6d1782284734fbe210edd54bf4215088835b
- Size
  
  4.3MB
- MD5
  
  fa5c59bc4f3660fd004c97fb39a0e9a3
- SHA1
  
  3765154ecaeb3b7f52d3c71b241057e0cb1b46bb
- SHA256
  
  8caa7b8da02ec861239c6b15aa1e6d1782284734fbe210edd54bf4215088835b
- SHA512
  
  bf3289ba9830c9733fff639af26574c4bd0969e0e20c2374d9dce55ca33333255ef3f2fdd382e75b22abba9e17f5c7d0e2bd78763bdfe542613fb1891d6a6683
- SSDEEP
  
  49152:oiOqoT5U2XC5Oarmxup4EdGKvghxfki1r9buOBqFWZ8hpTQd8f:r25UdQayKcrbuOBqFWZspsd8
Score

8^/10

adware discovery persistence stealer
- Registers COM server for autorun
  persistence
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Browser Extensions

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoverypersistencestealer

behavioral2

adwarediscoverypersistencestealer