General

  • Target

    73ac387dc2793a7621e9dd82d799c5d09dccb783d2f79b24edbe43d7074334e4

  • Size

    125KB

  • Sample

    221127-3efxvafh46

  • MD5

    ed0710d421a3443b8f4b56cc03796472

  • SHA1

    192040d44e60926cc9987b66316aab49afa3bec8

  • SHA256

    73ac387dc2793a7621e9dd82d799c5d09dccb783d2f79b24edbe43d7074334e4

  • SHA512

    a962b7e2f8063a964847f8d4c944590df4530df5ca08d06a10eec22540ffa2fbb2431abcd809f8b5e851cc349945875392da3bbab67923311e6dc45550ebecc9

  • SSDEEP

    3072:EmeDmBqskJCU+2PPM0EJMTIyYSNyE22Kemh:E8xU+QPM0EF1/EDKj

Malware Config

Targets

    • Target

      73ac387dc2793a7621e9dd82d799c5d09dccb783d2f79b24edbe43d7074334e4

    • Size

      125KB

    • MD5

      ed0710d421a3443b8f4b56cc03796472

    • SHA1

      192040d44e60926cc9987b66316aab49afa3bec8

    • SHA256

      73ac387dc2793a7621e9dd82d799c5d09dccb783d2f79b24edbe43d7074334e4

    • SHA512

      a962b7e2f8063a964847f8d4c944590df4530df5ca08d06a10eec22540ffa2fbb2431abcd809f8b5e851cc349945875392da3bbab67923311e6dc45550ebecc9

    • SSDEEP

      3072:EmeDmBqskJCU+2PPM0EJMTIyYSNyE22Kemh:E8xU+QPM0EF1/EDKj

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Matrix ATT&CK v6

Persistence

Browser Extensions

1
T1176

Defense Evasion

Modify Registry

2
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks