General

  • Target

    20af65a18d3c62b0b715f9e0f4c4589e02297dd780b37f7fde921ea568c5087c

  • Size

    124KB

  • Sample

    221123-hmz1gahf5v

  • MD5

    744f70d07097a1e8f534ac8b63652afc

  • SHA1

    92ad67b19deace6b7a86a96ca0cac9682ec5f523

  • SHA256

    20af65a18d3c62b0b715f9e0f4c4589e02297dd780b37f7fde921ea568c5087c

  • SHA512

    9eaf81ff270475f257ca25fde168b46d26788a4e2fd08f30b1a029c3bd418d710c6739794b7e3c3130bef6e226c4a4b69722f54fc6e42876b4f2021a256b92fa

  • SSDEEP

    3072:EmeDmBqskJnXK91wlVVNY39eby+FUl+u4j3epva:E88K8ldY39eDG+u4j3epva

Malware Config

Targets

    • Target

      20af65a18d3c62b0b715f9e0f4c4589e02297dd780b37f7fde921ea568c5087c

    • Size

      124KB

    • MD5

      744f70d07097a1e8f534ac8b63652afc

    • SHA1

      92ad67b19deace6b7a86a96ca0cac9682ec5f523

    • SHA256

      20af65a18d3c62b0b715f9e0f4c4589e02297dd780b37f7fde921ea568c5087c

    • SHA512

      9eaf81ff270475f257ca25fde168b46d26788a4e2fd08f30b1a029c3bd418d710c6739794b7e3c3130bef6e226c4a4b69722f54fc6e42876b4f2021a256b92fa

    • SSDEEP

      3072:EmeDmBqskJnXK91wlVVNY39eby+FUl+u4j3epva:E88K8ldY39eDG+u4j3epva

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Matrix ATT&CK v6

Persistence

Browser Extensions

1
T1176

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks