General

  • Target

    8b1de334bfe75137ab87f8e8f995c2876e57366495922b1d7022c7f26057996f

  • Size

    125KB

  • Sample

    221127-3njp4acf4y

  • MD5

    8bf184f9b557b64fe48b196eaea9a4a4

  • SHA1

    4d2d3ca1ea0cd4a3023423686e1a6b853b7007b6

  • SHA256

    8b1de334bfe75137ab87f8e8f995c2876e57366495922b1d7022c7f26057996f

  • SHA512

    b9ae75f18cfe343f9d531993ca2832c663d1bbc52c6ecfdd3881fd51accf5ef3bf9f81111902f2ab6626d6a68765ef17ef67be89a91107a8e8178bf065ee009d

  • SSDEEP

    3072:EmeDmBqskJUepFZXyYLfLhUFJAfQfUcVmJ3E1EP0S:E8/epFkqLhU0fmVmJ33P

Malware Config

Targets

    • Target

      8b1de334bfe75137ab87f8e8f995c2876e57366495922b1d7022c7f26057996f

    • Size

      125KB

    • MD5

      8bf184f9b557b64fe48b196eaea9a4a4

    • SHA1

      4d2d3ca1ea0cd4a3023423686e1a6b853b7007b6

    • SHA256

      8b1de334bfe75137ab87f8e8f995c2876e57366495922b1d7022c7f26057996f

    • SHA512

      b9ae75f18cfe343f9d531993ca2832c663d1bbc52c6ecfdd3881fd51accf5ef3bf9f81111902f2ab6626d6a68765ef17ef67be89a91107a8e8178bf065ee009d

    • SSDEEP

      3072:EmeDmBqskJUepFZXyYLfLhUFJAfQfUcVmJ3E1EP0S:E8/epFkqLhU0fmVmJ33P

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Matrix ATT&CK v6

Persistence

Browser Extensions

1
T1176

Defense Evasion

Modify Registry

2
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks