General

  • Target

    924c2baa6e1090c312c4f7510903957e1fba1d988bd0b6189ed5dbb58be97363

  • Size

    124KB

  • Sample

    221129-f19qqahe33

  • MD5

    cdbc896beccc8e85e1b762bf0e6bd130

  • SHA1

    eaea78415fd27120d858a5030a63fd5212be7153

  • SHA256

    924c2baa6e1090c312c4f7510903957e1fba1d988bd0b6189ed5dbb58be97363

  • SHA512

    f6f17c494df4625a6311173c0fb4b233e9041ead85f558cea52af10febf0834a39ab9a752a665ed51dc5c37d181e4f0bcf2c51e0af4c64b6d2e1e1fd162b8e6f

  • SSDEEP

    3072:EmeDmBqskJzCm/Rkt7VHLjeiQMJPqdjfSsGfh5d:E8KCget7VH/eAPqdjjGfh5d

Malware Config

Targets

    • Target

      924c2baa6e1090c312c4f7510903957e1fba1d988bd0b6189ed5dbb58be97363

    • Size

      124KB

    • MD5

      cdbc896beccc8e85e1b762bf0e6bd130

    • SHA1

      eaea78415fd27120d858a5030a63fd5212be7153

    • SHA256

      924c2baa6e1090c312c4f7510903957e1fba1d988bd0b6189ed5dbb58be97363

    • SHA512

      f6f17c494df4625a6311173c0fb4b233e9041ead85f558cea52af10febf0834a39ab9a752a665ed51dc5c37d181e4f0bcf2c51e0af4c64b6d2e1e1fd162b8e6f

    • SSDEEP

      3072:EmeDmBqskJzCm/Rkt7VHLjeiQMJPqdjfSsGfh5d:E8KCget7VH/eAPqdjjGfh5d

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Matrix ATT&CK v6

Persistence

Browser Extensions

1
T1176

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks