ad8153d9b927805f51ef1a24d737eabf355a9e083866a41e005c2a78b0fe66b6 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

ad8153d9b9...b6.exe

windows7-x64

8

ad8153d9b9...b6.exe

windows10-2004-x64

8

Sharing

General

Target

ad8153d9b927805f51ef1a24d737eabf355a9e083866a41e005c2a78b0fe66b6
Size

257KB
Sample

221205-vke9hacd81
MD5

dfa7d6fd67e10e2314f3cf455559b4f6
SHA1

7aaa290ff3a60116fe4bca3a105a5a714d610145
SHA256

ad8153d9b927805f51ef1a24d737eabf355a9e083866a41e005c2a78b0fe66b6
SHA512

b1745ac600fd9de4360b222fd61893685c3e1dce33bf2fd3b56fafbad0507d077a777c61a12903e2f0307e3ed238affaebde77c09d8e99bfe451947eb453c10b
SSDEEP

6144:91OgDPdkBAFZWjadD4s9sfs1Ev7bqNhfaOEO/Hk09sbwa:91OgLdaxTbqNhfaOEO/E0OMa

Score

8^/10

adware discovery spyware stealer

Static task

static1

Behavioral task

behavioral1

Sample

ad8153d9b927805f51ef1a24d737eabf355a9e083866a41e005c2a78b0fe66b6.exe

Resource

win7-20220812-en

adware discovery spyware stealer

windows7-x64

10 signatures

150 seconds

Behavioral task

behavioral2

Sample

ad8153d9b927805f51ef1a24d737eabf355a9e083866a41e005c2a78b0fe66b6.exe

Resource

win10v2004-20221111-en

windows10-2004-x64

3 signatures

150 seconds

Malware Config

Targets

- Target
  
  ad8153d9b927805f51ef1a24d737eabf355a9e083866a41e005c2a78b0fe66b6
- Size
  
  257KB
- MD5
  
  dfa7d6fd67e10e2314f3cf455559b4f6
- SHA1
  
  7aaa290ff3a60116fe4bca3a105a5a714d610145
- SHA256
  
  ad8153d9b927805f51ef1a24d737eabf355a9e083866a41e005c2a78b0fe66b6
- SHA512
  
  b1745ac600fd9de4360b222fd61893685c3e1dce33bf2fd3b56fafbad0507d077a777c61a12903e2f0307e3ed238affaebde77c09d8e99bfe451947eb453c10b
- SSDEEP
  
  6144:91OgDPdkBAFZWjadD4s9sfs1Ev7bqNhfaOEO/Hk09sbwa:91OgLdaxTbqNhfaOEO/E0OMa
Score

8^/10

adware discovery spyware stealer
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Browser Extensions

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Credentials in Files

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Data from Local System

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoveryspywarestealer

behavioral2

© 2018-2025

Terms | Privacy