c184350dad93c0177ca15d6c699618998bd87d2489d7879510dc416d959e823e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1cac5de1efa7f1b9036c57c9b4b115d6
Size

64KB
Sample

231230-z375fscfc6
MD5

1cac5de1efa7f1b9036c57c9b4b115d6
SHA1

c7c584b74d295c25dd4ab7dff2476ee10a60ca14
SHA256

c184350dad93c0177ca15d6c699618998bd87d2489d7879510dc416d959e823e
SHA512

208ff6a8843e2d6785096e343bec0e76eb4d481cbf3052df1d8ace20000a84ff1d8402449f4a77e0187be598476a1eea4a55d1982afad21091abe79fb5fec293
SSDEEP

1536:E7DbJIo9aXfOnWem93OlDMh8cQHaiWLaprR5ddlSko:uvJIrXfOeJO6EOLapvlx

Score

7^/10

adware stealer

Malware Config

Targets

- Target
  
  1cac5de1efa7f1b9036c57c9b4b115d6
- Size
  
  64KB
- MD5
  
  1cac5de1efa7f1b9036c57c9b4b115d6
- SHA1
  
  c7c584b74d295c25dd4ab7dff2476ee10a60ca14
- SHA256
  
  c184350dad93c0177ca15d6c699618998bd87d2489d7879510dc416d959e823e
- SHA512
  
  208ff6a8843e2d6785096e343bec0e76eb4d481cbf3052df1d8ace20000a84ff1d8402449f4a77e0187be598476a1eea4a55d1982afad21091abe79fb5fec293
- SSDEEP
  
  1536:E7DbJIo9aXfOnWem93OlDMh8cQHaiWLaprR5ddlSko:uvJIrXfOeJO6EOLapvlx
Score

7^/10

adware stealer
- ACProtect 1.3x - 1.4x DLL software
  Detects file using ACProtect software.
- Deletes itself
- Loads dropped DLL
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Browser Extensions

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2