a51b2b64e6522c195c159006cc62e6f295f82c670856462f2308098adc4f1962 | Triage

Sharing

General

Target

a51b2b64e6522c195c159006cc62e6f295f82c670856462f2308098adc4f1962
Size

125KB
Sample

221128-edcxsscf39
MD5

819447edf24a8b01020e1a45d7aa99b3
SHA1

4d1984811ad81a01fc62af1266fab56d70705668
SHA256

a51b2b64e6522c195c159006cc62e6f295f82c670856462f2308098adc4f1962
SHA512

e56abf47d57b8fddf0d51d0b4b187290fd40831c81447d12f5aec5c30e6f981e6ef0fa88d1bbecf897a0782d3aaf167077c9057c30cf6df61c97d6b036725a15
SSDEEP

3072:EmeDmBqskJDSwLy1s94E8xUajtIp++yw8Tgv:E8LwLP9I9jWpfn8TY

Score

7^/10

adware discovery stealer

Malware Config

Targets

- Target
  
  a51b2b64e6522c195c159006cc62e6f295f82c670856462f2308098adc4f1962
- Size
  
  125KB
- MD5
  
  819447edf24a8b01020e1a45d7aa99b3
- SHA1
  
  4d1984811ad81a01fc62af1266fab56d70705668
- SHA256
  
  a51b2b64e6522c195c159006cc62e6f295f82c670856462f2308098adc4f1962
- SHA512
  
  e56abf47d57b8fddf0d51d0b4b187290fd40831c81447d12f5aec5c30e6f981e6ef0fa88d1bbecf897a0782d3aaf167077c9057c30cf6df61c97d6b036725a15
- SSDEEP
  
  3072:EmeDmBqskJDSwLy1s94E8xUajtIp++yw8Tgv:E8LwLP9I9jWpfn8TY
Score

7^/10

adware discovery stealer
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Browser Extensions

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoverystealer

behavioral2

adwarediscoverystealer