d568207a06d4f3286667d13a3888f8e75a0b877ba26d4cd66dc5fd028fa9bc02 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

74bc56e7379990f7326e07ed7ae5ed6d
Size

122KB
Sample

240125-p1x7csfhg2
MD5

74bc56e7379990f7326e07ed7ae5ed6d
SHA1

99ed40c1728da4ace2c4fade5b10a3a2d77eccf0
SHA256

d568207a06d4f3286667d13a3888f8e75a0b877ba26d4cd66dc5fd028fa9bc02
SHA512

6f162b650e664ad42864bcf6168223e315cacde91baa95f14cbf62d94de8c5e7dddb5857bd5af994048a9116d469773bdcbd81b86973261ec2f560395892fcc4
SSDEEP

3072:EmeDmBqskJZtek2ni2jtRR0ag+MJw0UrpIX6jpNi:E8NknQRRAoY6j2

Score

7^/10

adware discovery stealer

Malware Config

Targets

- Target
  
  74bc56e7379990f7326e07ed7ae5ed6d
- Size
  
  122KB
- MD5
  
  74bc56e7379990f7326e07ed7ae5ed6d
- SHA1
  
  99ed40c1728da4ace2c4fade5b10a3a2d77eccf0
- SHA256
  
  d568207a06d4f3286667d13a3888f8e75a0b877ba26d4cd66dc5fd028fa9bc02
- SHA512
  
  6f162b650e664ad42864bcf6168223e315cacde91baa95f14cbf62d94de8c5e7dddb5857bd5af994048a9116d469773bdcbd81b86973261ec2f560395892fcc4
- SSDEEP
  
  3072:EmeDmBqskJZtek2ni2jtRR0ag+MJw0UrpIX6jpNi:E8NknQRRAoY6j2
Score

7^/10

adware discovery stealer
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Browser Extensions

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoverystealer

behavioral2

adwarediscoverystealer