76b2388129a03ce07e2cf90e652a76d5954d20bed879055ee58d8876b32cc79e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a1c1d8d168a8e1832da5fc771c362ad
Size

127KB
Sample

240114-dk13jacaa3
MD5

5a1c1d8d168a8e1832da5fc771c362ad
SHA1

013750ca2daf0c3570c99afb531751c9e6db2b22
SHA256

76b2388129a03ce07e2cf90e652a76d5954d20bed879055ee58d8876b32cc79e
SHA512

301fa493486c7c07d626e939732d2403c3e532166d00102f83df2e6ba5ace8c66390a16f8ce25bd2a96aad70e995fff70850d5e8d4ae2914e98ba382eaef6ccf
SSDEEP

3072:EmeDmBqskJwYQvzpC3Did9oPEHJyG3gGdoO:E8DYQNC3Di9VtgGdP

Score

7^/10

adware discovery stealer

Malware Config

Targets

- Target
  
  5a1c1d8d168a8e1832da5fc771c362ad
- Size
  
  127KB
- MD5
  
  5a1c1d8d168a8e1832da5fc771c362ad
- SHA1
  
  013750ca2daf0c3570c99afb531751c9e6db2b22
- SHA256
  
  76b2388129a03ce07e2cf90e652a76d5954d20bed879055ee58d8876b32cc79e
- SHA512
  
  301fa493486c7c07d626e939732d2403c3e532166d00102f83df2e6ba5ace8c66390a16f8ce25bd2a96aad70e995fff70850d5e8d4ae2914e98ba382eaef6ccf
- SSDEEP
  
  3072:EmeDmBqskJwYQvzpC3Did9oPEHJyG3gGdoO:E8DYQNC3Di9VtgGdP
Score

7^/10

adware discovery stealer
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Browser Extensions

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoverystealer

behavioral2

adwarediscoverystealer