96a772b1f1b38a5a8c68c05775c684c23c6136664f0be4469c3f2a18544c932d | Triage

Sharing

General

Target

96a772b1f1b38a5a8c68c05775c684c23c6136664f0be4469c3f2a18544c932d
Size

109KB
Sample

221201-a823ysdh4x
MD5

2ccf717bacef5498722b4022bb5abe30
SHA1

66d9084599817201c72994ee46473d7e9621dcc5
SHA256

96a772b1f1b38a5a8c68c05775c684c23c6136664f0be4469c3f2a18544c932d
SHA512

e107f5627491ee29a6a164f8c2cee188a7ff25c0c00cf0c09df082168432c9fb58a4b79719acb427cf649208e876ee9b66dfbfd8dbd184a32fc79ed7c590b1d3
SSDEEP

3072:ymeDmBqskJXmhkQjohQxstz5G6pBHh09:y8wmhBilVvpB+

Score

7^/10

adware discovery stealer

Malware Config

Targets

- Target
  
  96a772b1f1b38a5a8c68c05775c684c23c6136664f0be4469c3f2a18544c932d
- Size
  
  109KB
- MD5
  
  2ccf717bacef5498722b4022bb5abe30
- SHA1
  
  66d9084599817201c72994ee46473d7e9621dcc5
- SHA256
  
  96a772b1f1b38a5a8c68c05775c684c23c6136664f0be4469c3f2a18544c932d
- SHA512
  
  e107f5627491ee29a6a164f8c2cee188a7ff25c0c00cf0c09df082168432c9fb58a4b79719acb427cf649208e876ee9b66dfbfd8dbd184a32fc79ed7c590b1d3
- SSDEEP
  
  3072:ymeDmBqskJXmhkQjohQxstz5G6pBHh09:y8wmhBilVvpB+
Score

7^/10

adware discovery stealer
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Browser Extensions

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoverystealer

behavioral2

adwarediscoverystealer