General

  • Target

    94e31a706dbd0c7c1bcf8c03679df3d5e67b06d0ebbdee5eb35a98f37eb9b6a6

  • Size

    125KB

  • Sample

    221128-bgv11aha3v

  • MD5

    27ca4998f1b9507c00e4bb4c0285cb5e

  • SHA1

    7c79ae38321beffe4769580a1e549cb1445bc7fe

  • SHA256

    94e31a706dbd0c7c1bcf8c03679df3d5e67b06d0ebbdee5eb35a98f37eb9b6a6

  • SHA512

    740ecfbf2f47a3b83c31ea8e1d1e24aef0151f007ccc2502c685f8a554e7753bc76afc0a735b391129c73ce09a879366c2363a2fafafe8a9e0094ab5295695fc

  • SSDEEP

    3072:EmeDmBqskJ7iUBHlhRdLQ7IsTqUzPBPMizw5S1A0:E8mBFhRds0sGUbNM55h0

Malware Config

Targets

    • Target

      94e31a706dbd0c7c1bcf8c03679df3d5e67b06d0ebbdee5eb35a98f37eb9b6a6

    • Size

      125KB

    • MD5

      27ca4998f1b9507c00e4bb4c0285cb5e

    • SHA1

      7c79ae38321beffe4769580a1e549cb1445bc7fe

    • SHA256

      94e31a706dbd0c7c1bcf8c03679df3d5e67b06d0ebbdee5eb35a98f37eb9b6a6

    • SHA512

      740ecfbf2f47a3b83c31ea8e1d1e24aef0151f007ccc2502c685f8a554e7753bc76afc0a735b391129c73ce09a879366c2363a2fafafe8a9e0094ab5295695fc

    • SSDEEP

      3072:EmeDmBqskJ7iUBHlhRdLQ7IsTqUzPBPMizw5S1A0:E8mBFhRds0sGUbNM55h0

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Matrix ATT&CK v6

Persistence

Browser Extensions

1
T1176

Defense Evasion

Modify Registry

2
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks