add23eb2cf257e76a057d4c02debb98dc54d4a1ee5dd303d90526d98d1cf4bcc | Triage

Sharing

General

Target

add23eb2cf257e76a057d4c02debb98dc54d4a1ee5dd303d90526d98d1cf4bcc
Size

4.3MB
Sample

221124-zmgbsshc67
MD5

e174e0433b5e28b14b28f1005b008d0a
SHA1

3b1049c3c2d6a79390a760de9cc078a19340e985
SHA256

add23eb2cf257e76a057d4c02debb98dc54d4a1ee5dd303d90526d98d1cf4bcc
SHA512

e27c6687fa042ea85d770d43136584829c29339e11b93bf713a0dc3ffabc33746baaa287d6d4fc3a5587dbe988608efe28f7601b11150032320a51d0817ff2be
SSDEEP

49152:8iOqoT5U2XC5Oarmxup4UdGKvghxfki14c7SKryoC3yE/Ac5mWxnm1f:n25UdQaqKc37SK+oWNAxen+

Score

8^/10

adware discovery persistence stealer

Malware Config

Targets

- Target
  
  add23eb2cf257e76a057d4c02debb98dc54d4a1ee5dd303d90526d98d1cf4bcc
- Size
  
  4.3MB
- MD5
  
  e174e0433b5e28b14b28f1005b008d0a
- SHA1
  
  3b1049c3c2d6a79390a760de9cc078a19340e985
- SHA256
  
  add23eb2cf257e76a057d4c02debb98dc54d4a1ee5dd303d90526d98d1cf4bcc
- SHA512
  
  e27c6687fa042ea85d770d43136584829c29339e11b93bf713a0dc3ffabc33746baaa287d6d4fc3a5587dbe988608efe28f7601b11150032320a51d0817ff2be
- SSDEEP
  
  49152:8iOqoT5U2XC5Oarmxup4UdGKvghxfki14c7SKryoC3yE/Ac5mWxnm1f:n25UdQaqKc37SK+oWNAxen+
Score

8^/10

adware discovery persistence stealer
- Registers COM server for autorun
  persistence
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Browser Extensions

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoverypersistencestealer

behavioral2

adwarediscoverypersistencestealer