17c75502d4789e693dca96439ae43dfeac0872f5e3289929db6f53704c832008 | Triage

Sharing

General

Target

3e147622075d3cf94cb336657b03d322
Size

128KB
Sample

240102-sm7qesahh4
MD5

3e147622075d3cf94cb336657b03d322
SHA1

b3c931d5f56e3e23b5033a968586cc5b6c66cd35
SHA256

17c75502d4789e693dca96439ae43dfeac0872f5e3289929db6f53704c832008
SHA512

4fc41f21e5cf013fe7cc484ab9d00b4bf29cb788e509b75b6fefe004ab8938832bba2ac76b95061cd3a09a1028a1b6d7ca7d91828ad33ecb1728ade1f145805c
SSDEEP

3072:EmeDmBqskJqR8SrVGGNy6YAghO8g9JkMIbR7xpDNrI:E8v8Srm6YDhO1CMI13NrI

Score

7^/10

adware discovery stealer

Malware Config

Targets

- Target
  
  3e147622075d3cf94cb336657b03d322
- Size
  
  128KB
- MD5
  
  3e147622075d3cf94cb336657b03d322
- SHA1
  
  b3c931d5f56e3e23b5033a968586cc5b6c66cd35
- SHA256
  
  17c75502d4789e693dca96439ae43dfeac0872f5e3289929db6f53704c832008
- SHA512
  
  4fc41f21e5cf013fe7cc484ab9d00b4bf29cb788e509b75b6fefe004ab8938832bba2ac76b95061cd3a09a1028a1b6d7ca7d91828ad33ecb1728ade1f145805c
- SSDEEP
  
  3072:EmeDmBqskJqR8SrVGGNy6YAghO8g9JkMIbR7xpDNrI:E8v8Srm6YDhO1CMI13NrI
Score

7^/10

adware discovery stealer
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Browser Extensions

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoverystealer

behavioral2