General

  • Target

    99eb9a35fce8044fc1a7cd6b245f9836b022f8a85c211a08628ebdca307cf1c2

  • Size

    154KB

  • Sample

    220427-sq3kwaegam

  • MD5

    57473801803d0a2b16e8630657ecc2f3

  • SHA1

    78ef0647286c9a21f836fa561c9563bdf9716c71

  • SHA256

    99eb9a35fce8044fc1a7cd6b245f9836b022f8a85c211a08628ebdca307cf1c2

  • SHA512

    fc67f13f0bbea7bb047654688dc108e4b3b0493863a3b982187285f7eb13ec4aba64c960e17971465a8740038afaf8adae6a6458e3fed10667caac4503001a33

Malware Config

Targets

    • Target

      99eb9a35fce8044fc1a7cd6b245f9836b022f8a85c211a08628ebdca307cf1c2

    • Size

      154KB

    • MD5

      57473801803d0a2b16e8630657ecc2f3

    • SHA1

      78ef0647286c9a21f836fa561c9563bdf9716c71

    • SHA256

      99eb9a35fce8044fc1a7cd6b245f9836b022f8a85c211a08628ebdca307cf1c2

    • SHA512

      fc67f13f0bbea7bb047654688dc108e4b3b0493863a3b982187285f7eb13ec4aba64c960e17971465a8740038afaf8adae6a6458e3fed10667caac4503001a33

    • Adds Run key to start application

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Matrix ATT&CK v6

Persistence

Registry Run Keys / Startup Folder

1
T1060

Browser Extensions

1
T1176

Defense Evasion

Modify Registry

2
T1112

Tasks