b25adcbac58af162011d0382c9a45bb41b48ece7f18c109c41a5bd57e0308e9c | Triage

Sharing

General

Target

88f255fd775aafb046e5d09b20479530
Size

128KB
Sample

240202-jh4crsbben
MD5

88f255fd775aafb046e5d09b20479530
SHA1

66679e0d020a19828953862224f61a500640b981
SHA256

b25adcbac58af162011d0382c9a45bb41b48ece7f18c109c41a5bd57e0308e9c
SHA512

43c5c415aa7ea5aea0f8becbc001d853b8f5730969465f522723f2ffb43ae00397d1e9ef724997fd347c18ff7e3fa1065675506b0a244e5d2bfeb6bb7c00fd44
SSDEEP

3072:EmeDmBqskJgjCwAeOd4eOIBd6/T+h/zPv5VdYR1:E8hE4eOa6/ChrRVdYR1

Score

7^/10

adware discovery stealer

Malware Config

Targets

- Target
  
  88f255fd775aafb046e5d09b20479530
- Size
  
  128KB
- MD5
  
  88f255fd775aafb046e5d09b20479530
- SHA1
  
  66679e0d020a19828953862224f61a500640b981
- SHA256
  
  b25adcbac58af162011d0382c9a45bb41b48ece7f18c109c41a5bd57e0308e9c
- SHA512
  
  43c5c415aa7ea5aea0f8becbc001d853b8f5730969465f522723f2ffb43ae00397d1e9ef724997fd347c18ff7e3fa1065675506b0a244e5d2bfeb6bb7c00fd44
- SSDEEP
  
  3072:EmeDmBqskJgjCwAeOd4eOIBd6/T+h/zPv5VdYR1:E8hE4eOa6/ChrRVdYR1
Score

7^/10

adware discovery stealer
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Browser Extensions

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoverystealer

behavioral2

adwarediscoverystealer