General

  • Target

    44ab29f8c98db8d038badf81d2bc7737

  • Size

    321KB

  • Sample

    240105-24xq8accbr

  • MD5

    44ab29f8c98db8d038badf81d2bc7737

  • SHA1

    8a8335a9fe633554f2651f57d3100c762ce18968

  • SHA256

    14f8b870ea7830b828e2641f4fe8493a937c1fe1552d081dbdc3dd3a7ca6f10c

  • SHA512

    7721eb3195e21e4dfd12cfd113c5d256796eec1e59f5b366da85aa86bc3ad301ea9b2a9e60c8ab44358d6146111ec3c0a03002ab26f6b3c5d74ae2450a36a5ef

  • SSDEEP

    6144:OiLsNLop94KLMZ4hD2tUfBxboPRYG4SLRXUxVK:OiQNo9TYFtUJB9ANUxc

Malware Config

Targets

    • Target

      44ab29f8c98db8d038badf81d2bc7737

    • Size

      321KB

    • MD5

      44ab29f8c98db8d038badf81d2bc7737

    • SHA1

      8a8335a9fe633554f2651f57d3100c762ce18968

    • SHA256

      14f8b870ea7830b828e2641f4fe8493a937c1fe1552d081dbdc3dd3a7ca6f10c

    • SHA512

      7721eb3195e21e4dfd12cfd113c5d256796eec1e59f5b366da85aa86bc3ad301ea9b2a9e60c8ab44358d6146111ec3c0a03002ab26f6b3c5d74ae2450a36a5ef

    • SSDEEP

      6144:OiLsNLop94KLMZ4hD2tUfBxboPRYG4SLRXUxVK:OiQNo9TYFtUJB9ANUxc

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks whether UAC is enabled

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks