General

  • Target

    ad087e6ae70818b612dd768ba67440d4c5056922d696988e6066a595a319d8f5

  • Size

    89KB

  • Sample

    221205-k69ecsab9t

  • MD5

    143e5ab44e61c1f95ddc615121c95b2b

  • SHA1

    849fd87f6e5fec4ca24b1f5ab14dd7282978280e

  • SHA256

    ad087e6ae70818b612dd768ba67440d4c5056922d696988e6066a595a319d8f5

  • SHA512

    0f5e8343aa279224a2e9ab5535eef7a2bb22429caf3d0380830d4536f1b7abdfe68501d4a0b040ecf5080faaea339dfad29206762acc3fd7cf270e9ed3951397

  • SSDEEP

    768:/TWKbVk14UoPFlHRcLyR9q7IHHyV1x6Y5vyBjjXb0lcZsllI:/T7woni+R9BC1xP5vsolcEI

Malware Config

Targets

    • Target

      ad087e6ae70818b612dd768ba67440d4c5056922d696988e6066a595a319d8f5

    • Size

      89KB

    • MD5

      143e5ab44e61c1f95ddc615121c95b2b

    • SHA1

      849fd87f6e5fec4ca24b1f5ab14dd7282978280e

    • SHA256

      ad087e6ae70818b612dd768ba67440d4c5056922d696988e6066a595a319d8f5

    • SHA512

      0f5e8343aa279224a2e9ab5535eef7a2bb22429caf3d0380830d4536f1b7abdfe68501d4a0b040ecf5080faaea339dfad29206762acc3fd7cf270e9ed3951397

    • SSDEEP

      768:/TWKbVk14UoPFlHRcLyR9q7IHHyV1x6Y5vyBjjXb0lcZsllI:/T7woni+R9BC1xP5vsolcEI

    • UAC bypass

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks whether UAC is enabled

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks