6d993684bb1fdf2431a0fac99be31258d14ff901dc645c515675dce3f414b997 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2263022414a64ccfc4f3c89ecf927d9c
Size

6KB
Sample

231231-bbaswaagcn
MD5

2263022414a64ccfc4f3c89ecf927d9c
SHA1

b37edcd5ec112b1d3cd2e8d09a2107def5578bad
SHA256

6d993684bb1fdf2431a0fac99be31258d14ff901dc645c515675dce3f414b997
SHA512

735af1e613e7ab9b470d62fedb1ed245e793e56ba96469431bef8119365dc09ae391af6527ff2457b683afbfa67a48e9014710342395d8c0c9575e04f47f33cd
SSDEEP

192:6xUEO1kzwbGlwnbfADYc4INj+GQ+siZnPIwT:6aEnwbGy0MnIHFZPIw

Score

10^/10

adware evasion stealer trojan

Malware Config

Targets

- Target
  
  2263022414a64ccfc4f3c89ecf927d9c
- Size
  
  6KB
- MD5
  
  2263022414a64ccfc4f3c89ecf927d9c
- SHA1
  
  b37edcd5ec112b1d3cd2e8d09a2107def5578bad
- SHA256
  
  6d993684bb1fdf2431a0fac99be31258d14ff901dc645c515675dce3f414b997
- SHA512
  
  735af1e613e7ab9b470d62fedb1ed245e793e56ba96469431bef8119365dc09ae391af6527ff2457b683afbfa67a48e9014710342395d8c0c9575e04f47f33cd
- SSDEEP
  
  192:6xUEO1kzwbGlwnbfADYc4INj+GQ+siZnPIwT:6aEnwbGy0MnIHFZPIw
Score

10^/10

adware evasion stealer trojan
- Modifies firewall policy service
  evasion
- Windows security bypass
  evasion trojan
- Windows security modification
  evasion trojan
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Browser Extensions

Create or Modify System Process

Windows Service

Privilege Escalation

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwareevasionstealertrojan

behavioral2