31f2dd7a001ec8b5c65f5a2bbf1f58548d14c3a4468dd9e5a8d8059396341983 | Triage

Sharing

General

Target

31f2dd7a001ec8b5c65f5a2bbf1f58548d14c3a4468dd9e5a8d8059396341983N
Size

144KB
Sample

241110-h9rbvasdkq
MD5

8aa6b268143e74ca234151aafab998c0
SHA1

3d6106c6caa20cd4b1b59e24222b1969efe5e0b0
SHA256

31f2dd7a001ec8b5c65f5a2bbf1f58548d14c3a4468dd9e5a8d8059396341983
SHA512

ce39dcf3923b49fcba327edd5f082f592c66e14bcc8644ffda10dafd25fc2e5d0f64afc968a671d1e9f178476b1706a55f5b355101cd175ffe1006256ad8ff47
SSDEEP

3072:M5sYrWSqGzk2l4+Nass5yYb0cRJlO75O/70:2si/mcw5xbHRq75Q

Score

6^/10

adware discovery stealer

Malware Config

Targets

- Target
  
  31f2dd7a001ec8b5c65f5a2bbf1f58548d14c3a4468dd9e5a8d8059396341983N
- Size
  
  144KB
- MD5
  
  8aa6b268143e74ca234151aafab998c0
- SHA1
  
  3d6106c6caa20cd4b1b59e24222b1969efe5e0b0
- SHA256
  
  31f2dd7a001ec8b5c65f5a2bbf1f58548d14c3a4468dd9e5a8d8059396341983
- SHA512
  
  ce39dcf3923b49fcba327edd5f082f592c66e14bcc8644ffda10dafd25fc2e5d0f64afc968a671d1e9f178476b1706a55f5b355101cd175ffe1006256ad8ff47
- SSDEEP
  
  3072:M5sYrWSqGzk2l4+Nass5yYb0cRJlO75O/70:2si/mcw5xbHRq75Q
Score

6^/10

adware discovery stealer
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Installs/modifies Browser Helper Object
  BHOs are DLL modules which act as plugins for Internet Explorer.
  stealer adware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Browser Extensions

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoverystealer

behavioral2