fdbce8efa355eec91da838f0cb21085b359ff67dd6aa212fc5083bf20eb1dc5e | Triage

Submit
Reports

Overview

overview

8

Static

static

fdbce8efa3...5e.exe

windows7-x64

8

fdbce8efa3...5e.exe

windows10-2004-x64

8

Sharing

General

Target

fdbce8efa355eec91da838f0cb21085b359ff67dd6aa212fc5083bf20eb1dc5e
Size

4.4MB
Sample

221124-tx31nafb74
MD5

d9b969af76dec0c16636eb9fb9ea83c4
SHA1

ab62c2858da98a47d8a4e6f9642b07b324aefa3a
SHA256

fdbce8efa355eec91da838f0cb21085b359ff67dd6aa212fc5083bf20eb1dc5e
SHA512

bebe0acb9bc435b5d8683cced79773225dbc31149cf1248dfdf2c4f79d97630025b41eb5533dbe19068e0f3deb061365578038284aa1c972942d389ea2f929f4
SSDEEP

49152:QhuK4jmWrCBDT+qLmxup4VdGKvghxfki1Kc7SK6jSlM/Zf0weeDNxUC:m2mWrKyqDKcZ7SK6j8MNtLNxU

Score

8^/10

adware discovery persistence stealer

Static task

static1

Behavioral task

behavioral1

Sample

fdbce8efa355eec91da838f0cb21085b359ff67dd6aa212fc5083bf20eb1dc5e.exe

Resource

win7-20221111-en

adware discovery persistence stealer

windows7-x64

11 signatures

150 seconds

Behavioral task

behavioral2

Sample

fdbce8efa355eec91da838f0cb21085b359ff67dd6aa212fc5083bf20eb1dc5e.exe

Resource

win10v2004-20220812-en

adware discovery persistence stealer

windows10-2004-x64

11 signatures

150 seconds

Malware Config

Targets

- Target
  
  fdbce8efa355eec91da838f0cb21085b359ff67dd6aa212fc5083bf20eb1dc5e
- Size
  
  4.4MB
- MD5
  
  d9b969af76dec0c16636eb9fb9ea83c4
- SHA1
  
  ab62c2858da98a47d8a4e6f9642b07b324aefa3a
- SHA256
  
  fdbce8efa355eec91da838f0cb21085b359ff67dd6aa212fc5083bf20eb1dc5e
- SHA512
  
  bebe0acb9bc435b5d8683cced79773225dbc31149cf1248dfdf2c4f79d97630025b41eb5533dbe19068e0f3deb061365578038284aa1c972942d389ea2f929f4
- SSDEEP
  
  49152:QhuK4jmWrCBDT+qLmxup4VdGKvghxfki1Kc7SK6jSlM/Zf0weeDNxUC:m2mWrKyqDKcZ7SK6j8MNtLNxU
Score

8^/10

adware discovery persistence stealer
- Registers COM server for autorun
  persistence
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Browser Extensions

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1

adwarediscoverypersistencestealer

behavioral2

adwarediscoverypersistencestealer

© 2018-2024

Terms | Privacy