General

  • Target

    f19b61b2d46a36270ed8b995f73a5f7a291d615eb9dd2df378e0f9cb58db7233

  • Size

    104KB

  • Sample

    221207-a3z2eada3x

  • MD5

    e469fd0bc5f22f5d70a329210e26c239

  • SHA1

    7168b12862a583d7a583c09204d9c11f389b0eec

  • SHA256

    f19b61b2d46a36270ed8b995f73a5f7a291d615eb9dd2df378e0f9cb58db7233

  • SHA512

    d6e69171b47af94da4b269546abaefabd40b6609f03fe22640d5671e4d127b7be40f1c87d4635cf011cd01943f223540251ff03247e5055b609ec26b9f0d9e7a

  • SSDEEP

    3072:Je8vjtpF8acymAr5pg1rHAmmRBi9X3ku9:g6JpSac18ng1rHAmmUn

Malware Config

Targets

    • Target

      f19b61b2d46a36270ed8b995f73a5f7a291d615eb9dd2df378e0f9cb58db7233

    • Size

      104KB

    • MD5

      e469fd0bc5f22f5d70a329210e26c239

    • SHA1

      7168b12862a583d7a583c09204d9c11f389b0eec

    • SHA256

      f19b61b2d46a36270ed8b995f73a5f7a291d615eb9dd2df378e0f9cb58db7233

    • SHA512

      d6e69171b47af94da4b269546abaefabd40b6609f03fe22640d5671e4d127b7be40f1c87d4635cf011cd01943f223540251ff03247e5055b609ec26b9f0d9e7a

    • SSDEEP

      3072:Je8vjtpF8acymAr5pg1rHAmmRBi9X3ku9:g6JpSac18ng1rHAmmUn

    • Windows security bypass

    • Deletes itself

    • Loads dropped DLL

    • Windows security modification

    • Adds Run key to start application

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v6

Tasks