560c91c05d6669f81bc9e7a25560a0e706d8a7c00ad6c5a6f9763d858fba2c68 | Triage

Sharing

General

Target

c70ad415ba35ae476a57c3c0099d398c
Size

128KB
Sample

240313-2pqpcsbc8t
MD5

c70ad415ba35ae476a57c3c0099d398c
SHA1

0144a3d373c47e7c3baaec6701a13317f2ce9870
SHA256

560c91c05d6669f81bc9e7a25560a0e706d8a7c00ad6c5a6f9763d858fba2c68
SHA512

8e754486af9376fc2f2db67d0aef89d4338233d75254087e7e44cd56a502765166ab732b83751c6d88f6bdd7dc64642005b2d94584114b1e270ee44819808710
SSDEEP

3072:EmeDmBqskJnEEP0hpqluisGWgNv6d/FLHd7nbShj7ZoZTOM:E8es3isW611ZnbShXOZiM

Score

7^/10

adware discovery stealer

Malware Config

Targets

- Target
  
  c70ad415ba35ae476a57c3c0099d398c
- Size
  
  128KB
- MD5
  
  c70ad415ba35ae476a57c3c0099d398c
- SHA1
  
  0144a3d373c47e7c3baaec6701a13317f2ce9870
- SHA256
  
  560c91c05d6669f81bc9e7a25560a0e706d8a7c00ad6c5a6f9763d858fba2c68
- SHA512
  
  8e754486af9376fc2f2db67d0aef89d4338233d75254087e7e44cd56a502765166ab732b83751c6d88f6bdd7dc64642005b2d94584114b1e270ee44819808710
- SSDEEP
  
  3072:EmeDmBqskJnEEP0hpqluisGWgNv6d/FLHd7nbShj7ZoZTOM:E8es3isW611ZnbShXOZiM
Score

7^/10

adware discovery stealer
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Browser Extensions

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoverystealer

behavioral2

adwarediscoverystealer