2edc9db79edcebb8f02cc82818bc278bd7ed1764c6a884ac2326dcde827e1dbd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2edc9db79edcebb8f02cc82818bc278bd7ed1764c6a884ac2326dcde827e1dbd
Size

124KB
Sample

221126-3lzcrsgf6w
MD5

b90d551bd2de7c853313e059d14e87c0
SHA1

446959931587b55bcbb446eddbf9830c3eb16c74
SHA256

2edc9db79edcebb8f02cc82818bc278bd7ed1764c6a884ac2326dcde827e1dbd
SHA512

4b95f0293af4c534a496a247160e055f227eb19d5b739ad0263f40f79eb1741445c3a7baac427d0a8ed9329ce653b4943d3dfaeca6f67d91d08a75a80c96a1b1
SSDEEP

3072:EmeDmBqskJvI9vi2vWDOR1fFlLC8tFTHr9ISNul:E86IQ2o4LC+THrWOul

Score

7^/10

adware discovery stealer

Malware Config

Targets

- Target
  
  2edc9db79edcebb8f02cc82818bc278bd7ed1764c6a884ac2326dcde827e1dbd
- Size
  
  124KB
- MD5
  
  b90d551bd2de7c853313e059d14e87c0
- SHA1
  
  446959931587b55bcbb446eddbf9830c3eb16c74
- SHA256
  
  2edc9db79edcebb8f02cc82818bc278bd7ed1764c6a884ac2326dcde827e1dbd
- SHA512
  
  4b95f0293af4c534a496a247160e055f227eb19d5b739ad0263f40f79eb1741445c3a7baac427d0a8ed9329ce653b4943d3dfaeca6f67d91d08a75a80c96a1b1
- SSDEEP
  
  3072:EmeDmBqskJvI9vi2vWDOR1fFlLC8tFTHr9ISNul:E86IQ2o4LC+THrWOul
Score

7^/10

adware discovery stealer
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Browser Extensions

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoverystealer

behavioral2

adwarediscoverystealer