General

  • Target

    0c92b16777b67840d3dd2311c0317617

  • Size

    3.8MB

  • Sample

    231230-dph3hshfhj

  • MD5

    0c92b16777b67840d3dd2311c0317617

  • SHA1

    f4d5931eaa5a06a92ae6d2898dc92f0b5413a314

  • SHA256

    d3a06ae244259f14c5e3ce210497b69503a0dcac2df5b1078e51422c5275b781

  • SHA512

    02f7b6e5ff1f6ec2ea83ef5b9a543cec88a355e03bfc66e6b0c6cde3783917ad46eff1a1d88b91537d0672f63f33c0e9adaa73dd6392a57804d29b5335eb407b

  • SSDEEP

    49152:qLzYGW6VMZwbGLepAZneRzVRbzDzqlzZ:SLaT

Score
7/10

Malware Config

Targets

    • Target

      0c92b16777b67840d3dd2311c0317617

    • Size

      3.8MB

    • MD5

      0c92b16777b67840d3dd2311c0317617

    • SHA1

      f4d5931eaa5a06a92ae6d2898dc92f0b5413a314

    • SHA256

      d3a06ae244259f14c5e3ce210497b69503a0dcac2df5b1078e51422c5275b781

    • SHA512

      02f7b6e5ff1f6ec2ea83ef5b9a543cec88a355e03bfc66e6b0c6cde3783917ad46eff1a1d88b91537d0672f63f33c0e9adaa73dd6392a57804d29b5335eb407b

    • SSDEEP

      49152:qLzYGW6VMZwbGLepAZneRzVRbzDzqlzZ:SLaT

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks