e8c56d45355e9d632a94a21fc0e0da5f96f21b286329f1c5b7f8630925d69ee1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c62ea6f2407abae2b0b118a026115f60
Size

1.4MB
Sample

240313-sf6vjsga8t
MD5

c62ea6f2407abae2b0b118a026115f60
SHA1

b85b36b65fc7ea9695deb84b9a3863107002979d
SHA256

e8c56d45355e9d632a94a21fc0e0da5f96f21b286329f1c5b7f8630925d69ee1
SHA512

e4987d5e4eb0b20fc294e22548672b7afe6e2601330f99b84c7e6ccf758cca4dd3f263fdfb0a632119258367b6eb443c0a62021c0d51a46d4f11cba29bc10065
SSDEEP

24576:HhDi2wizHLu11au63mAy+WHe+tdNRnyezWWOxx7IIVNUb2fr25xuPpFLAXcOvPhB:YI3ly+W7NRyezyx7IIVlj2wFLAMOv5Yg

Score

8^/10

adware evasion persistence stealer

Malware Config

Targets

- Target
  
  c62ea6f2407abae2b0b118a026115f60
- Size
  
  1.4MB
- MD5
  
  c62ea6f2407abae2b0b118a026115f60
- SHA1
  
  b85b36b65fc7ea9695deb84b9a3863107002979d
- SHA256
  
  e8c56d45355e9d632a94a21fc0e0da5f96f21b286329f1c5b7f8630925d69ee1
- SHA512
  
  e4987d5e4eb0b20fc294e22548672b7afe6e2601330f99b84c7e6ccf758cca4dd3f263fdfb0a632119258367b6eb443c0a62021c0d51a46d4f11cba29bc10065
- SSDEEP
  
  24576:HhDi2wizHLu11au63mAy+WHe+tdNRnyezWWOxx7IIVNUb2fr25xuPpFLAXcOvPhB:YI3ly+W7NRyezyx7IIVlj2wFLAMOv5Yg
Score

8^/10

adware evasion persistence stealer
- Modifies Windows Firewall
  evasion
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Browser Extensions

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwareevasionpersistencestealer

behavioral2