12b9ecd000eb697c42a9660c0d00d7266b133f0422bb12474ad0646b256c19f1 | Triage

Sharing

General

Target

12b9ecd000eb697c42a9660c0d00d7266b133f0422bb12474ad0646b256c19f1
Size

4.3MB
Sample

221124-l6argaaf31
MD5

49182922cde5dfbf9b05faa6ac52b042
SHA1

b7619bfaf2048e0154140b0fb1654c41812ff326
SHA256

12b9ecd000eb697c42a9660c0d00d7266b133f0422bb12474ad0646b256c19f1
SHA512

2168904992b8c4fc0c5922f9f37725dbf8cf8c17d229319395772c1f465c4d3a71fb411a2dcd46726941efb0e3233a2d0fbf0c93931f60dc22605d3d5bca8137
SSDEEP

49152:jSuK4jZ0WHCpNqLmxup4NdGKvghxfki1wOCrZguQByoC3yE/Ac5mWxnm/r:u2Z0NvqDKc9WZgqoWNAxen8

Score

8^/10

adware discovery persistence stealer

Malware Config

Targets

- Target
  
  12b9ecd000eb697c42a9660c0d00d7266b133f0422bb12474ad0646b256c19f1
- Size
  
  4.3MB
- MD5
  
  49182922cde5dfbf9b05faa6ac52b042
- SHA1
  
  b7619bfaf2048e0154140b0fb1654c41812ff326
- SHA256
  
  12b9ecd000eb697c42a9660c0d00d7266b133f0422bb12474ad0646b256c19f1
- SHA512
  
  2168904992b8c4fc0c5922f9f37725dbf8cf8c17d229319395772c1f465c4d3a71fb411a2dcd46726941efb0e3233a2d0fbf0c93931f60dc22605d3d5bca8137
- SSDEEP
  
  49152:jSuK4jZ0WHCpNqLmxup4NdGKvghxfki1wOCrZguQByoC3yE/Ac5mWxnm/r:u2Z0NvqDKc9WZgqoWNAxen8
Score

8^/10

adware discovery persistence stealer
- Registers COM server for autorun
  persistence
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Browser Extensions

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

adwarediscoverypersistencestealer