6edae35116cacf91bcda6f787bf127b36b7423b6be4de4cb371ae76f5db634b8 | Triage

Sharing

General

Target

6edae35116cacf91bcda6f787bf127b36b7423b6be4de4cb371ae76f5db634b8
Size

2.1MB
Sample

221124-n2v8qabh97
MD5

ac8c5b28c893aff345d8a83b5fd2fc51
SHA1

1c5698633aff215cd980ade821671a4303e90e8a
SHA256

6edae35116cacf91bcda6f787bf127b36b7423b6be4de4cb371ae76f5db634b8
SHA512

7a59c612c06428785200b144b126a1681613d0ae2c428698f99f01bedfd17bc330e5e8f5da146bc1e8578250fe9464506aecd3f74801708b1304bbd82acb0a33
SSDEEP

24576:h1OYdaOyTwLleYkTVug2PiL0jHM8WK5z6Sh19BUfOD4XRt1otyBNvJvMXzGK5IhH:h1OsRLARTQ9PimJWtShQnvQsru0

Score

8^/10

adware discovery spyware stealer

Malware Config

Targets

- Target
  
  6edae35116cacf91bcda6f787bf127b36b7423b6be4de4cb371ae76f5db634b8
- Size
  
  2.1MB
- MD5
  
  ac8c5b28c893aff345d8a83b5fd2fc51
- SHA1
  
  1c5698633aff215cd980ade821671a4303e90e8a
- SHA256
  
  6edae35116cacf91bcda6f787bf127b36b7423b6be4de4cb371ae76f5db634b8
- SHA512
  
  7a59c612c06428785200b144b126a1681613d0ae2c428698f99f01bedfd17bc330e5e8f5da146bc1e8578250fe9464506aecd3f74801708b1304bbd82acb0a33
- SSDEEP
  
  24576:h1OYdaOyTwLleYkTVug2PiL0jHM8WK5z6Sh19BUfOD4XRt1otyBNvJvMXzGK5IhH:h1OsRLARTQ9PimJWtShQnvQsru0
Score

8^/10

adware discovery spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops Chrome extension
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Browser Extensions

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoveryspywarestealer

behavioral2

adwarediscoveryspywarestealer