General

  • Target

    579b8987a766f396e22eab984fa9bea06bc9291bb3f1fdd297b1125881645e77

  • Size

    125KB

  • Sample

    221128-axs1xabb76

  • MD5

    04870191947e2d1aee1fe0615ca6bae8

  • SHA1

    a712364f015b1be515b4fd584c5cb5260348efeb

  • SHA256

    579b8987a766f396e22eab984fa9bea06bc9291bb3f1fdd297b1125881645e77

  • SHA512

    b58cfd34c421761ce800408c0294c47408d3d6dd6cd317ffa7f1a46519723a464e2e487b3adbbcfa011e0c1b6a9905b1f9959e1d9d8680ecd9bafed99ef056fb

  • SSDEEP

    3072:EmeDmBqskJQ5q2oVwMmydvDt3dkreifAX19m/M8/DiJls1:E897oVwMFcCiovLGUls1

Malware Config

Targets

    • Target

      579b8987a766f396e22eab984fa9bea06bc9291bb3f1fdd297b1125881645e77

    • Size

      125KB

    • MD5

      04870191947e2d1aee1fe0615ca6bae8

    • SHA1

      a712364f015b1be515b4fd584c5cb5260348efeb

    • SHA256

      579b8987a766f396e22eab984fa9bea06bc9291bb3f1fdd297b1125881645e77

    • SHA512

      b58cfd34c421761ce800408c0294c47408d3d6dd6cd317ffa7f1a46519723a464e2e487b3adbbcfa011e0c1b6a9905b1f9959e1d9d8680ecd9bafed99ef056fb

    • SSDEEP

      3072:EmeDmBqskJQ5q2oVwMmydvDt3dkreifAX19m/M8/DiJls1:E897oVwMFcCiovLGUls1

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Matrix ATT&CK v6

Persistence

Browser Extensions

1
T1176

Defense Evasion

Modify Registry

2
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks