740dab4935b164b6a6620bbd8f3281bbce5fb734dfa1b26bd294be1059ec242b | Triage

Sharing

General

Target

740dab4935b164b6a6620bbd8f3281bbce5fb734dfa1b26bd294be1059ec242b
Size

124KB
Sample

221124-pcsxqsfg61
MD5

e17945af4d2ce685120b3696b8f67b44
SHA1

503ede2abee00be53177e1b4f87327158d048853
SHA256

740dab4935b164b6a6620bbd8f3281bbce5fb734dfa1b26bd294be1059ec242b
SHA512

383917ab3be6ef29affa9b5fc19bbfb119a12c7bc1175020a04cf9aecc8ce56d5498facef5bf0668649e1b4d4ea2514195fc601acd995121d18d90062403bd8f
SSDEEP

3072:EmeDmBqskJljspLC2rY4f+LZXMpUmZYsBSDYy0Q4odcy:E8W/eKQUmLBSkydVcy

Score

7^/10

adware discovery stealer

Malware Config

Targets

- Target
  
  740dab4935b164b6a6620bbd8f3281bbce5fb734dfa1b26bd294be1059ec242b
- Size
  
  124KB
- MD5
  
  e17945af4d2ce685120b3696b8f67b44
- SHA1
  
  503ede2abee00be53177e1b4f87327158d048853
- SHA256
  
  740dab4935b164b6a6620bbd8f3281bbce5fb734dfa1b26bd294be1059ec242b
- SHA512
  
  383917ab3be6ef29affa9b5fc19bbfb119a12c7bc1175020a04cf9aecc8ce56d5498facef5bf0668649e1b4d4ea2514195fc601acd995121d18d90062403bd8f
- SSDEEP
  
  3072:EmeDmBqskJljspLC2rY4f+LZXMpUmZYsBSDYy0Q4odcy:E8W/eKQUmLBSkydVcy
Score

7^/10

adware discovery stealer
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Browser Extensions

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoverystealer

behavioral2

adwarediscoverystealer