General

  • Target

    38972f46b6f90aff8f84a2db101954d677b685d963669ad7bd6c66c71d7d10df

  • Size

    1.8MB

  • Sample

    221126-1v7dmagf29

  • MD5

    6f8ef575d4ac33cc73e248259b684637

  • SHA1

    d6c200085c5a6acdd0abbec64976fbe952c1b3a1

  • SHA256

    38972f46b6f90aff8f84a2db101954d677b685d963669ad7bd6c66c71d7d10df

  • SHA512

    20d3ad1666183ed09497864fdd6c18c5d4e007c0fdb0e2f64077b7b72d75337aaf63391c7778d320c2f6e706eca4929277170a16b8237897470221313c306772

  • SSDEEP

    49152:wp06fwmXLslRGiPSWYgRQm8f7yuE2chBGN:wphfwmXLslR/tQBf7MZHGN

Score
8/10

Malware Config

Targets

    • Target

      38972f46b6f90aff8f84a2db101954d677b685d963669ad7bd6c66c71d7d10df

    • Size

      1.8MB

    • MD5

      6f8ef575d4ac33cc73e248259b684637

    • SHA1

      d6c200085c5a6acdd0abbec64976fbe952c1b3a1

    • SHA256

      38972f46b6f90aff8f84a2db101954d677b685d963669ad7bd6c66c71d7d10df

    • SHA512

      20d3ad1666183ed09497864fdd6c18c5d4e007c0fdb0e2f64077b7b72d75337aaf63391c7778d320c2f6e706eca4929277170a16b8237897470221313c306772

    • SSDEEP

      49152:wp06fwmXLslRGiPSWYgRQm8f7yuE2chBGN:wphfwmXLslR/tQBf7MZHGN

    Score
    8/10
    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Loads dropped DLL

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Matrix ATT&CK v6

Persistence

Browser Extensions

1
T1176

Defense Evasion

Modify Registry

2
T1112

Discovery

System Information Discovery

1
T1082

Command and Control

Web Service

1
T1102

Tasks