General

  • Target

    17ba83f79f37e85b9c9fd05dc71645e2

  • Size

    59KB

  • Sample

    231230-n4faaaedc6

  • MD5

    17ba83f79f37e85b9c9fd05dc71645e2

  • SHA1

    f154fda2ecb59e0d56df108a492bb473ebb7a3cd

  • SHA256

    fbf3997330e5b4e11c9786a0947a943e895cb6f6706e726b804d40fc6b59ec40

  • SHA512

    eb5185ad8692fb78e7556dbab70c7579871a1f466d1050aca319fa8c183d49f80a82716f260ab5f8e0824f3c28773bb125c031577cce16fa98f6028585f6fda8

  • SSDEEP

    1536:WriYVA9WB5dHn5dBl1pN15x1Z5lwTsmSLRA8vKuVEHFducS32j:yB5dHn5dBl1pN15x1Z5lCsmSXyuVLyj

Score
7/10

Malware Config

Targets

    • Target

      17ba83f79f37e85b9c9fd05dc71645e2

    • Size

      59KB

    • MD5

      17ba83f79f37e85b9c9fd05dc71645e2

    • SHA1

      f154fda2ecb59e0d56df108a492bb473ebb7a3cd

    • SHA256

      fbf3997330e5b4e11c9786a0947a943e895cb6f6706e726b804d40fc6b59ec40

    • SHA512

      eb5185ad8692fb78e7556dbab70c7579871a1f466d1050aca319fa8c183d49f80a82716f260ab5f8e0824f3c28773bb125c031577cce16fa98f6028585f6fda8

    • SSDEEP

      1536:WriYVA9WB5dHn5dBl1pN15x1Z5lwTsmSLRA8vKuVEHFducS32j:yB5dHn5dBl1pN15x1Z5lCsmSXyuVLyj

    Score
    7/10
    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks