General

  • Target

    Internet Download Manager 6.41 Build 11.exe

  • Size

    8.9MB

  • Sample

    230421-w5nl2shc92

  • MD5

    6deafa718fbd973a7bda0e5b2616da35

  • SHA1

    1c738d64a5b0b7f7892f1ef73dcf922a12dadb74

  • SHA256

    8f8513942652f3c93d2b090a97f839ae7122eaec5af7b76adf67f7897b59cc3c

  • SHA512

    0246f59233dd6acd30abd7e57db2cbfe161ae7483167c7a05d627b68221a56095b396f8e3f3015666e1a471f0c1ab3ced48c1339b0eec716c1380395a969633d

  • SSDEEP

    196608:Kg7J74AmvXe2f6M3acGB9pqSEtxxzasBTRaWb5NKQDBdzF:KgtcNvuBh/pqTxhRtbrKQjzF

Malware Config

Targets

    • Target

      Internet Download Manager 6.41 Build 11.exe

    • Size

      8.9MB

    • MD5

      6deafa718fbd973a7bda0e5b2616da35

    • SHA1

      1c738d64a5b0b7f7892f1ef73dcf922a12dadb74

    • SHA256

      8f8513942652f3c93d2b090a97f839ae7122eaec5af7b76adf67f7897b59cc3c

    • SHA512

      0246f59233dd6acd30abd7e57db2cbfe161ae7483167c7a05d627b68221a56095b396f8e3f3015666e1a471f0c1ab3ced48c1339b0eec716c1380395a969633d

    • SSDEEP

      196608:Kg7J74AmvXe2f6M3acGB9pqSEtxxzasBTRaWb5NKQDBdzF:KgtcNvuBh/pqTxhRtbrKQjzF

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Registers COM server for autorun

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

MITRE ATT&CK Enterprise v6

Tasks