551421db5add6cef4b612db8d198a40eb1e48f906ac889fc9bac1fbeb44f4eac | Triage

Sharing

General

Target

551421db5add6cef4b612db8d198a40eb1e48f906ac889fc9bac1fbeb44f4eac
Size

4.4MB
Sample

221124-n6jqgsfc9x
MD5

d06e2161e1ef64e5cbc92a6541abb3ef
SHA1

4f233a1d9ce7694c401f30aa1bbc5116eb9037cc
SHA256

551421db5add6cef4b612db8d198a40eb1e48f906ac889fc9bac1fbeb44f4eac
SHA512

793052dfa9309cb215f56d876aa1b058f198e2709c45adc389a85d9f924b465b5fb281355e1cffa7521d1f9aed6aafef6d5e881363074d9d9f60dd771eb1b10c
SSDEEP

49152:Bqk09VB9O6uUkK6Dmxup46SXOjKzuFYdkROCrZguQ/jSlM/Zf0weeDNxpy:I/POIB6HaOjK9kwWZglj8MNtLNxp

Score

8^/10

adware discovery persistence spyware stealer

Malware Config

Targets

- Target
  
  551421db5add6cef4b612db8d198a40eb1e48f906ac889fc9bac1fbeb44f4eac
- Size
  
  4.4MB
- MD5
  
  d06e2161e1ef64e5cbc92a6541abb3ef
- SHA1
  
  4f233a1d9ce7694c401f30aa1bbc5116eb9037cc
- SHA256
  
  551421db5add6cef4b612db8d198a40eb1e48f906ac889fc9bac1fbeb44f4eac
- SHA512
  
  793052dfa9309cb215f56d876aa1b058f198e2709c45adc389a85d9f924b465b5fb281355e1cffa7521d1f9aed6aafef6d5e881363074d9d9f60dd771eb1b10c
- SSDEEP
  
  49152:Bqk09VB9O6uUkK6Dmxup46SXOjKzuFYdkROCrZguQ/jSlM/Zf0weeDNxpy:I/POIB6HaOjK9kwWZglj8MNtLNxp
Score

8^/10

adware discovery persistence spyware stealer
- Registers COM server for autorun
  persistence
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Browser Extensions

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

adwarediscoverypersistencespywarestealer