1e825fa83b00fe31560196466ef8ea254fb8811078ba48cb1935db859a75f501 | Triage

Sharing

General

Target

4e9e35e8f32b581013c3945412fc3626
Size

6KB
Sample

240109-sf4p7acghq
MD5

4e9e35e8f32b581013c3945412fc3626
SHA1

b9a0bd17a76780683511ef79437affec98f3dd90
SHA256

1e825fa83b00fe31560196466ef8ea254fb8811078ba48cb1935db859a75f501
SHA512

a9cc8727b61f763125508126a6aac60759ab1a0709b8095e4b35f2092e68ef4f77a5c2b9690b93b4f64026239ce21603edd3ed5759b101eab03b13f1e99e9849
SSDEEP

192:QsPS0nd//EsbqdQvTIAEWA+a0uiZkTSyU7zp0nqI8TAAp:QVlsbeKT60hkH8wqjL

Score

7^/10

adware stealer

Malware Config

Targets

- Target
  
  4e9e35e8f32b581013c3945412fc3626
- Size
  
  6KB
- MD5
  
  4e9e35e8f32b581013c3945412fc3626
- SHA1
  
  b9a0bd17a76780683511ef79437affec98f3dd90
- SHA256
  
  1e825fa83b00fe31560196466ef8ea254fb8811078ba48cb1935db859a75f501
- SHA512
  
  a9cc8727b61f763125508126a6aac60759ab1a0709b8095e4b35f2092e68ef4f77a5c2b9690b93b4f64026239ce21603edd3ed5759b101eab03b13f1e99e9849
- SSDEEP
  
  192:QsPS0nd//EsbqdQvTIAEWA+a0uiZkTSyU7zp0nqI8TAAp:QVlsbeKT60hkH8wqjL
Score

7^/10

adware stealer
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Browser Extensions

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2