fcd0d2c60fca3d89fa0098581029ab550f6a81a26dd52cc39720c63476ca410c | Triage

Sharing

General

Target

fcd0d2c60fca3d89fa0098581029ab550f6a81a26dd52cc39720c63476ca410c
Size

4.1MB
Sample

221124-tz2wdaae61
MD5

79b4e6fda1e07d11997df40bee2e81a5
SHA1

529b6cb3d18924268c793fea2b59ca52e5be790f
SHA256

fcd0d2c60fca3d89fa0098581029ab550f6a81a26dd52cc39720c63476ca410c
SHA512

16da25e278d774ae321d52bf0568b430ca39a69a52c4548a0094245240d6915d5683ec24fa794a089946d7bacdb53d6f0b48a6e721c9667208501f49da4ba9bd
SSDEEP

49152:B8EmJxK/NCUIpj4hdA0wz5enfwZU5BcumL9Q+G0ytUSyaIVw/PMtn8NE3I9HCno:B/msnIiE55l5a/PMtEE3IhE

Score

8^/10

adware discovery persistence spyware stealer

Malware Config

Targets

- Target
  
  fcd0d2c60fca3d89fa0098581029ab550f6a81a26dd52cc39720c63476ca410c
- Size
  
  4.1MB
- MD5
  
  79b4e6fda1e07d11997df40bee2e81a5
- SHA1
  
  529b6cb3d18924268c793fea2b59ca52e5be790f
- SHA256
  
  fcd0d2c60fca3d89fa0098581029ab550f6a81a26dd52cc39720c63476ca410c
- SHA512
  
  16da25e278d774ae321d52bf0568b430ca39a69a52c4548a0094245240d6915d5683ec24fa794a089946d7bacdb53d6f0b48a6e721c9667208501f49da4ba9bd
- SSDEEP
  
  49152:B8EmJxK/NCUIpj4hdA0wz5enfwZU5BcumL9Q+G0ytUSyaIVw/PMtn8NE3I9HCno:B/msnIiE55l5a/PMtEE3IhE
Score

8^/10

adware discovery persistence spyware stealer
- Registers COM server for autorun
  persistence
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Browser Extensions

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Credentials in Files

Discovery

Query Registry

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoverypersistencespywarestealer

behavioral2

adwarediscoverypersistencespywarestealer