General

  • Target

    90395ffefa52b5455073679ad8459357

  • Size

    84KB

  • Sample

    240204-1h8qxsddgk

  • MD5

    90395ffefa52b5455073679ad8459357

  • SHA1

    41e87941a4fa805ed273400e6cdd9ab9b813eb03

  • SHA256

    218ce28b46e83abad1014fdf1c964af1ac588c50f5fcb22e8681c7d20554435d

  • SHA512

    96d3cb48ae6fbe164cbb31e868dd7497f9d9505a475c2a35df2e2fe3e437b5642a9402f6384820abf60fbe4c7e94c9e44c5f9a6e0ce87c4b44d9b0b7c5e7708d

  • SSDEEP

    1536:c4x0QmNcRZckmVMywOwJOo5TWN//LuFOKL2:c48cRZckmVr1cyTdKL

Malware Config

Targets

    • Target

      90395ffefa52b5455073679ad8459357

    • Size

      84KB

    • MD5

      90395ffefa52b5455073679ad8459357

    • SHA1

      41e87941a4fa805ed273400e6cdd9ab9b813eb03

    • SHA256

      218ce28b46e83abad1014fdf1c964af1ac588c50f5fcb22e8681c7d20554435d

    • SHA512

      96d3cb48ae6fbe164cbb31e868dd7497f9d9505a475c2a35df2e2fe3e437b5642a9402f6384820abf60fbe4c7e94c9e44c5f9a6e0ce87c4b44d9b0b7c5e7708d

    • SSDEEP

      1536:c4x0QmNcRZckmVMywOwJOo5TWN//LuFOKL2:c48cRZckmVr1cyTdKL

    • Modifies AppInit DLL entries

    • Deletes itself

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks