1713b5fdee97c58d84b89fbd03027e5910abbe9161565eda9582978a5b004534 | Triage

Sharing

General

Target

1713b5fdee97c58d84b89fbd03027e5910abbe9161565eda9582978a5b004534
Size

124KB
Sample

221125-yt2ewabh93
MD5

fdf2aa35eec94826bf194b26a14333a7
SHA1

0f42453ec14c4eede0941b929bd817e60b976d51
SHA256

1713b5fdee97c58d84b89fbd03027e5910abbe9161565eda9582978a5b004534
SHA512

fb2ffa4ac4e090d7ee2a6f524ab65aa5cd28b68d0de0964ef79960e663467327d497fcb1b0cd696e304321a6dd3c5b68a1472d6fa7ec91fcec97d74faa4b9579
SSDEEP

3072:EmeDmBqskJgCbrX0PRy9ULy1MzyV+U+GLtaRhf6FOhdz:E8QbL0PRcQyV+AL6g8hdz

Score

7^/10

adware discovery stealer

Malware Config

Targets

- Target
  
  1713b5fdee97c58d84b89fbd03027e5910abbe9161565eda9582978a5b004534
- Size
  
  124KB
- MD5
  
  fdf2aa35eec94826bf194b26a14333a7
- SHA1
  
  0f42453ec14c4eede0941b929bd817e60b976d51
- SHA256
  
  1713b5fdee97c58d84b89fbd03027e5910abbe9161565eda9582978a5b004534
- SHA512
  
  fb2ffa4ac4e090d7ee2a6f524ab65aa5cd28b68d0de0964ef79960e663467327d497fcb1b0cd696e304321a6dd3c5b68a1472d6fa7ec91fcec97d74faa4b9579
- SSDEEP
  
  3072:EmeDmBqskJgCbrX0PRy9ULy1MzyV+U+GLtaRhf6FOhdz:E8QbL0PRcQyV+AL6g8hdz
Score

7^/10

adware discovery stealer
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Browser Extensions

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoverystealer

behavioral2

adwarediscoverystealer