General

  • Target

    3edf517836202b0918a2455534f294e4db4673c596846dde47223cf6aea7a425

  • Size

    125KB

  • Sample

    221127-hr6ntagd73

  • MD5

    2c0ac720d83ae0e4362dc272d15f49ef

  • SHA1

    9d3a1361b5b6f6a72ae9c868729974286e9a4807

  • SHA256

    3edf517836202b0918a2455534f294e4db4673c596846dde47223cf6aea7a425

  • SHA512

    e7b2d2865cf4af697be695078d8e36cb56dd146da7e51e60b58c692dbd57a1420812424fea0045fb94c8eca41c4deb025d84654656ffad7462a5a09badc658ad

  • SSDEEP

    3072:EmeDmBqskJkLU00RxcUEL1NZHWQGFiY/8YNZm77N:E8FWW5NZ4FiYT7S7N

Malware Config

Targets

    • Target

      3edf517836202b0918a2455534f294e4db4673c596846dde47223cf6aea7a425

    • Size

      125KB

    • MD5

      2c0ac720d83ae0e4362dc272d15f49ef

    • SHA1

      9d3a1361b5b6f6a72ae9c868729974286e9a4807

    • SHA256

      3edf517836202b0918a2455534f294e4db4673c596846dde47223cf6aea7a425

    • SHA512

      e7b2d2865cf4af697be695078d8e36cb56dd146da7e51e60b58c692dbd57a1420812424fea0045fb94c8eca41c4deb025d84654656ffad7462a5a09badc658ad

    • SSDEEP

      3072:EmeDmBqskJkLU00RxcUEL1NZHWQGFiY/8YNZm77N:E8FWW5NZ4FiYT7S7N

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Matrix ATT&CK v6

Persistence

Browser Extensions

1
T1176

Defense Evasion

Modify Registry

2
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks