4a968901871d36331cc472861946c2a98aa68f5520371bc74ac053c2f7f75fe9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a968901871d36331cc472861946c2a98aa68f5520371bc74ac053c2f7f75fe9
Size

125KB
Sample

221127-sztdkaha24
MD5

c994012d2b81dccde362626aaf766740
SHA1

670811d5cc27962867ddb31a995183ec4d9baff9
SHA256

4a968901871d36331cc472861946c2a98aa68f5520371bc74ac053c2f7f75fe9
SHA512

69971247dd97e0ceaa266fc3335f2b2130b5c41f89b7650e0a32e87cb894cc7949be64662f2ffd25eec5d42d62ba39af9918c8ba6dda6fc79be74abd3a64e4b4
SSDEEP

3072:EmeDmBqskJSEMdE5WY9CU0opV9VBtchfVCNgobBpympjtXN:E8vEk+jAtWZqV2fL7

Score

7^/10

adware discovery stealer

Malware Config

Targets

- Target
  
  4a968901871d36331cc472861946c2a98aa68f5520371bc74ac053c2f7f75fe9
- Size
  
  125KB
- MD5
  
  c994012d2b81dccde362626aaf766740
- SHA1
  
  670811d5cc27962867ddb31a995183ec4d9baff9
- SHA256
  
  4a968901871d36331cc472861946c2a98aa68f5520371bc74ac053c2f7f75fe9
- SHA512
  
  69971247dd97e0ceaa266fc3335f2b2130b5c41f89b7650e0a32e87cb894cc7949be64662f2ffd25eec5d42d62ba39af9918c8ba6dda6fc79be74abd3a64e4b4
- SSDEEP
  
  3072:EmeDmBqskJSEMdE5WY9CU0opV9VBtchfVCNgobBpympjtXN:E8vEk+jAtWZqV2fL7
Score

7^/10

adware discovery stealer
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Browser Extensions

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoverystealer

behavioral2