General

  • Target

    fc1aa0daee6589f81a4ea546775e98a94a47be11be8ad7d6672bbabd5ae545e0

  • Size

    125KB

  • Sample

    221128-bm85tadb25

  • MD5

    0e595d0545b9434a12f87f6b7c3d393a

  • SHA1

    f67b6db43f7ee52c282bb3de1efaa6462e2cf2f3

  • SHA256

    fc1aa0daee6589f81a4ea546775e98a94a47be11be8ad7d6672bbabd5ae545e0

  • SHA512

    b2b110bd53538ec4f88a007bb8eb9625457db8a279559974ba48f0c1506be7caf766d7e7b067c841f4315514ecb0ba02963a094a0b2c07788a6f4bf683c4c8ff

  • SSDEEP

    3072:EmeDmBqskJMLGILnFkoYUqtHFWaQIu//5w30TRsY3lHOv:E81dL6owN0axuH5y0TRndOv

Malware Config

Targets

    • Target

      fc1aa0daee6589f81a4ea546775e98a94a47be11be8ad7d6672bbabd5ae545e0

    • Size

      125KB

    • MD5

      0e595d0545b9434a12f87f6b7c3d393a

    • SHA1

      f67b6db43f7ee52c282bb3de1efaa6462e2cf2f3

    • SHA256

      fc1aa0daee6589f81a4ea546775e98a94a47be11be8ad7d6672bbabd5ae545e0

    • SHA512

      b2b110bd53538ec4f88a007bb8eb9625457db8a279559974ba48f0c1506be7caf766d7e7b067c841f4315514ecb0ba02963a094a0b2c07788a6f4bf683c4c8ff

    • SSDEEP

      3072:EmeDmBqskJMLGILnFkoYUqtHFWaQIu//5w30TRsY3lHOv:E81dL6owN0axuH5y0TRndOv

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Matrix ATT&CK v6

Persistence

Browser Extensions

1
T1176

Defense Evasion

Modify Registry

2
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks