d0ef508e82b2ca043a17580690fabc408625fcf716c4d114d1eb8187f4b8338c | Triage

Sharing

General

Target

d0ef508e82b2ca043a17580690fabc408625fcf716c4d114d1eb8187f4b8338c
Size

4.3MB
Sample

221124-xjyqkacf63
MD5

cedf8151eb02b651d896ffaa3bd8f144
SHA1

80a95f3c514b2cb91b09a203536b710514baaf9f
SHA256

d0ef508e82b2ca043a17580690fabc408625fcf716c4d114d1eb8187f4b8338c
SHA512

eea8883ce290a5b63556ec7129daa56b674b69a290acd384f8926e8c147f3d4b1e6e2cd8f6af3355491aadb70f86779b887ea75a103a9bfece846fe778281f19
SSDEEP

49152:iUuKYWYG/n0JOKLmxup4ZdGKvghxfki1tc7SKXB+lyzEJ3jWP:TjYGcAKrKcs7SKYYiTW

Score

8^/10

adware discovery persistence stealer

Malware Config

Targets

- Target
  
  d0ef508e82b2ca043a17580690fabc408625fcf716c4d114d1eb8187f4b8338c
- Size
  
  4.3MB
- MD5
  
  cedf8151eb02b651d896ffaa3bd8f144
- SHA1
  
  80a95f3c514b2cb91b09a203536b710514baaf9f
- SHA256
  
  d0ef508e82b2ca043a17580690fabc408625fcf716c4d114d1eb8187f4b8338c
- SHA512
  
  eea8883ce290a5b63556ec7129daa56b674b69a290acd384f8926e8c147f3d4b1e6e2cd8f6af3355491aadb70f86779b887ea75a103a9bfece846fe778281f19
- SSDEEP
  
  49152:iUuKYWYG/n0JOKLmxup4ZdGKvghxfki1tc7SKXB+lyzEJ3jWP:TjYGcAKrKcs7SKYYiTW
Score

8^/10

adware discovery persistence stealer
- Registers COM server for autorun
  persistence
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Browser Extensions

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoverypersistencestealer

behavioral2

adwarediscoverypersistencestealer