General

  • Target

    34da59691dc1f021d31048f709c0e9b612a87e1d70a14408cde0a8c3ce969e88

  • Size

    859KB

  • Sample

    220619-yjb28schd8

  • MD5

    06bba2dceb45a8662063ef97f437b702

  • SHA1

    fffe75f0bac7d09d55f5fce87898cd4825816ea9

  • SHA256

    34da59691dc1f021d31048f709c0e9b612a87e1d70a14408cde0a8c3ce969e88

  • SHA512

    b4199cab674714235f6ce1d81636862a171d0f8e2fc41357ebf1f64825f93ead434f9dd2d3a8c770154909e8b67da23adeacd57bff9a2f99598fb46218c97bd3

Malware Config

Targets

    • Target

      34da59691dc1f021d31048f709c0e9b612a87e1d70a14408cde0a8c3ce969e88

    • Size

      859KB

    • MD5

      06bba2dceb45a8662063ef97f437b702

    • SHA1

      fffe75f0bac7d09d55f5fce87898cd4825816ea9

    • SHA256

      34da59691dc1f021d31048f709c0e9b612a87e1d70a14408cde0a8c3ce969e88

    • SHA512

      b4199cab674714235f6ce1d81636862a171d0f8e2fc41357ebf1f64825f93ead434f9dd2d3a8c770154909e8b67da23adeacd57bff9a2f99598fb46218c97bd3

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Matrix ATT&CK v6

Persistence

Browser Extensions

1
T1176

Defense Evasion

Modify Registry

1
T1112

Tasks