General

  • Target

    4fdbfd6ac8147f63127709c2b0e9afda5ad30a9b3f1808c7f514ea2bf098ec5b

  • Size

    125KB

  • Sample

    221128-bthansde84

  • MD5

    a25157378d9505b8638c0e1fc5b8c186

  • SHA1

    75b3edb53e650207cfe807dd23945ee1c2cf9c26

  • SHA256

    4fdbfd6ac8147f63127709c2b0e9afda5ad30a9b3f1808c7f514ea2bf098ec5b

  • SHA512

    8d0f870bc9e990f45c0a3b93db7336bc4fb8765ca72a1ceb22a80f08a4530bed65168abce8c1b81ab1e8b1bd7439b0c66b35eb9d6865f7887161866164e171ea

  • SSDEEP

    3072:EmeDmBqskJTGvCEt4arT0x7tBQrWz4mjfN8Qq7kj5iXG:E8LvztpT0x7tx4mTmQq7kj5GG

Malware Config

Targets

    • Target

      4fdbfd6ac8147f63127709c2b0e9afda5ad30a9b3f1808c7f514ea2bf098ec5b

    • Size

      125KB

    • MD5

      a25157378d9505b8638c0e1fc5b8c186

    • SHA1

      75b3edb53e650207cfe807dd23945ee1c2cf9c26

    • SHA256

      4fdbfd6ac8147f63127709c2b0e9afda5ad30a9b3f1808c7f514ea2bf098ec5b

    • SHA512

      8d0f870bc9e990f45c0a3b93db7336bc4fb8765ca72a1ceb22a80f08a4530bed65168abce8c1b81ab1e8b1bd7439b0c66b35eb9d6865f7887161866164e171ea

    • SSDEEP

      3072:EmeDmBqskJTGvCEt4arT0x7tBQrWz4mjfN8Qq7kj5iXG:E8LvztpT0x7tx4mTmQq7kj5GG

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Matrix ATT&CK v6

Persistence

Browser Extensions

1
T1176

Defense Evasion

Modify Registry

2
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks