c0d14d9efdb7647dddf6ade6c9b019da5fa4ba83ecc549141fc07c3a5988e766 | Triage

Sharing

General

Target

c0d14d9efdb7647dddf6ade6c9b019da5fa4ba83ecc549141fc07c3a5988e766
Size

91KB
Sample

221205-rw1g2ahd77
MD5

36f91b22ad28e1f8452260bd5fca12bf
SHA1

5955901584dba727369ccaf73fb3ba323642fa53
SHA256

c0d14d9efdb7647dddf6ade6c9b019da5fa4ba83ecc549141fc07c3a5988e766
SHA512

29d4eca6ad2a8855ae672f4f2b91ad8be44728969dc7ec3f19de77cf3bc98c6b67d331114cf5cee451f2dc619727bc87790c8b8dc1865a084992e8493f9eda38
SSDEEP

1536:R4uqymwbq30QdB0Oy8VCcy7zaYtkuE4gaJcKrt40IsDXyLeQzdXbBi:/qymgm0wDC1askaJJt7IsxQBXbBi

Score

7^/10

adware discovery stealer

Malware Config

Targets

- Target
  
  c0d14d9efdb7647dddf6ade6c9b019da5fa4ba83ecc549141fc07c3a5988e766
- Size
  
  91KB
- MD5
  
  36f91b22ad28e1f8452260bd5fca12bf
- SHA1
  
  5955901584dba727369ccaf73fb3ba323642fa53
- SHA256
  
  c0d14d9efdb7647dddf6ade6c9b019da5fa4ba83ecc549141fc07c3a5988e766
- SHA512
  
  29d4eca6ad2a8855ae672f4f2b91ad8be44728969dc7ec3f19de77cf3bc98c6b67d331114cf5cee451f2dc619727bc87790c8b8dc1865a084992e8493f9eda38
- SSDEEP
  
  1536:R4uqymwbq30QdB0Oy8VCcy7zaYtkuE4gaJcKrt40IsDXyLeQzdXbBi:/qymgm0wDC1askaJJt7IsxQBXbBi
Score

7^/10

adware discovery stealer
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Browser Extensions

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoverystealer

behavioral2

adwarediscoverystealer