General

  • Target

    03fe25a6050e7e2db664ac97db3949f654c59eb265601182dcf753d337c58b19

  • Size

    7.9MB

  • Sample

    220527-2hmzwsbcck

  • MD5

    0642d0921f55d2337b723a5471c9d657

  • SHA1

    c1e31792069125312c985cbcea701cd480e32cec

  • SHA256

    03fe25a6050e7e2db664ac97db3949f654c59eb265601182dcf753d337c58b19

  • SHA512

    5214c66bfcd152439746fbb55cdd1d24e09622a45900c98552369c7af0b656326d6cb16660e3ebb9407f9b370327231f18b40a16c0e2d58eb8e72385add551c4

Malware Config

Targets

    • Target

      03fe25a6050e7e2db664ac97db3949f654c59eb265601182dcf753d337c58b19

    • Size

      7.9MB

    • MD5

      0642d0921f55d2337b723a5471c9d657

    • SHA1

      c1e31792069125312c985cbcea701cd480e32cec

    • SHA256

      03fe25a6050e7e2db664ac97db3949f654c59eb265601182dcf753d337c58b19

    • SHA512

      5214c66bfcd152439746fbb55cdd1d24e09622a45900c98552369c7af0b656326d6cb16660e3ebb9407f9b370327231f18b40a16c0e2d58eb8e72385add551c4

    • Modifies system executable filetype association

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Loads dropped DLL

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks