General

  • Target

    27c9533715d94a020be18360f6e6f7eb

  • Size

    108KB

  • Sample

    231231-evxcrsbef2

  • MD5

    27c9533715d94a020be18360f6e6f7eb

  • SHA1

    df3a9a76adb44faf2e2cde92a208d591f11bdaa0

  • SHA256

    e6bb3546d7c41bcebb5cebd511e90e47b2c7677181390170faacecc3acf634f5

  • SHA512

    156cefe5523387d8174d91d95328f163f79f62efbae1660d7aa5d167e5eeee681b049327f2c392d09a08e768dec0d796abbe0a9e943208fe419a6e13e2d7113d

  • SSDEEP

    1536:qJ4D/myyghkcx7JSLZC5ZnGKBVRwBc/Icj1rRy0TiROsh+Y3o:TDeyyWkcqQbGKBVRBIE9iRV3o

Malware Config

Targets

    • Target

      27c9533715d94a020be18360f6e6f7eb

    • Size

      108KB

    • MD5

      27c9533715d94a020be18360f6e6f7eb

    • SHA1

      df3a9a76adb44faf2e2cde92a208d591f11bdaa0

    • SHA256

      e6bb3546d7c41bcebb5cebd511e90e47b2c7677181390170faacecc3acf634f5

    • SHA512

      156cefe5523387d8174d91d95328f163f79f62efbae1660d7aa5d167e5eeee681b049327f2c392d09a08e768dec0d796abbe0a9e943208fe419a6e13e2d7113d

    • SSDEEP

      1536:qJ4D/myyghkcx7JSLZC5ZnGKBVRwBc/Icj1rRy0TiROsh+Y3o:TDeyyWkcqQbGKBVRBIE9iRV3o

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks