18377974084e8210406003438515ecbb369bf04979b8f092e8ad4692782b06e2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18377974084e8210406003438515ecbb369bf04979b8f092e8ad4692782b06e2
Size

124KB
Sample

221206-slctnace9t
MD5

6f18c0e99e74ed82c181d67f617b6dfd
SHA1

d0a5e25ff2a27e6274cf72f05308255b9b6123e0
SHA256

18377974084e8210406003438515ecbb369bf04979b8f092e8ad4692782b06e2
SHA512

abe975f9df29500a81411bda37b672e28f5398bffe665ed7c91d49d0edde18752d7203969ba20308f9f6c962c3022e71fb03cb149f9b0b338836eb7e8685b3e6
SSDEEP

3072:EmeDmBqskJ+Ep55tAbTzE56vz36qG5t3cjii7:E8TEHLAXQ5s695tsj37

Score

7^/10

adware discovery stealer

Malware Config

Targets

- Target
  
  18377974084e8210406003438515ecbb369bf04979b8f092e8ad4692782b06e2
- Size
  
  124KB
- MD5
  
  6f18c0e99e74ed82c181d67f617b6dfd
- SHA1
  
  d0a5e25ff2a27e6274cf72f05308255b9b6123e0
- SHA256
  
  18377974084e8210406003438515ecbb369bf04979b8f092e8ad4692782b06e2
- SHA512
  
  abe975f9df29500a81411bda37b672e28f5398bffe665ed7c91d49d0edde18752d7203969ba20308f9f6c962c3022e71fb03cb149f9b0b338836eb7e8685b3e6
- SSDEEP
  
  3072:EmeDmBqskJ+Ep55tAbTzE56vz36qG5t3cjii7:E8TEHLAXQ5s695tsj37
Score

7^/10

adware discovery stealer
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Browser Extensions

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoverystealer

behavioral2

adwarediscoverystealer