General

  • Target

    ea1f693c6ddf2a0524fcdffa68d4a93f2c9d5a6ac6282e5e159098c7542d703b

  • Size

    125KB

  • Sample

    221127-3bj54abf51

  • MD5

    2b392ad2202a1e366d97e4602e794e0e

  • SHA1

    94d52f1b2f8ccb32d00d6db67438810287565fae

  • SHA256

    ea1f693c6ddf2a0524fcdffa68d4a93f2c9d5a6ac6282e5e159098c7542d703b

  • SHA512

    5446c042835e5662d131ae6b653514cf3a0acb7f5b651a7502267616b2562741a9dc56424e97b2459f1e88e8ee076585d010cc734c929abf96d1e91a9f4ef104

  • SSDEEP

    3072:EmeDmBqskJYAqmDK3jE1J+/ULobUtHlNUyoPkgZ5JKro6:E8BZp3ja0MLoSNUySIro6

Malware Config

Targets

    • Target

      ea1f693c6ddf2a0524fcdffa68d4a93f2c9d5a6ac6282e5e159098c7542d703b

    • Size

      125KB

    • MD5

      2b392ad2202a1e366d97e4602e794e0e

    • SHA1

      94d52f1b2f8ccb32d00d6db67438810287565fae

    • SHA256

      ea1f693c6ddf2a0524fcdffa68d4a93f2c9d5a6ac6282e5e159098c7542d703b

    • SHA512

      5446c042835e5662d131ae6b653514cf3a0acb7f5b651a7502267616b2562741a9dc56424e97b2459f1e88e8ee076585d010cc734c929abf96d1e91a9f4ef104

    • SSDEEP

      3072:EmeDmBqskJYAqmDK3jE1J+/ULobUtHlNUyoPkgZ5JKro6:E8BZp3ja0MLoSNUySIro6

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Matrix ATT&CK v6

Persistence

Browser Extensions

1
T1176

Defense Evasion

Modify Registry

2
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks