General

  • Target

    654033f2bba6466f2c4ff116e90d6cb2

  • Size

    22KB

  • Sample

    231226-lw5h4abcem

  • MD5

    654033f2bba6466f2c4ff116e90d6cb2

  • SHA1

    af837c2fe53935d76e0259993be68d8c8c53c825

  • SHA256

    cabadfad599dc4ab1bee2d264858584858a4a6b082bea08f173487bcf5707571

  • SHA512

    44464531a2d002006a72ab343987b848abe307e7ab948632243f963607cb36d198fd989ee168539b7b77f218af1f7421205be6d68377b6a0201c6f2549db520b

  • SSDEEP

    384:Lfra102La/cJvulqH+ihqxWnJJk9tP47t8eKjP+3piVlxaHF7DW:LfWfa/cAshqxWJi9tw7t8eKS3MxwF

Malware Config

Targets

    • Target

      654033f2bba6466f2c4ff116e90d6cb2

    • Size

      22KB

    • MD5

      654033f2bba6466f2c4ff116e90d6cb2

    • SHA1

      af837c2fe53935d76e0259993be68d8c8c53c825

    • SHA256

      cabadfad599dc4ab1bee2d264858584858a4a6b082bea08f173487bcf5707571

    • SHA512

      44464531a2d002006a72ab343987b848abe307e7ab948632243f963607cb36d198fd989ee168539b7b77f218af1f7421205be6d68377b6a0201c6f2549db520b

    • SSDEEP

      384:Lfra102La/cJvulqH+ihqxWnJJk9tP47t8eKjP+3piVlxaHF7DW:LfWfa/cAshqxWJi9tw7t8eKS3MxwF

    • Adds policy Run key to start application

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks