General

  • Target

    908bbf2b6a34afd35afe853deafac8b1

  • Size

    37KB

  • Sample

    240205-anxyhaedc6

  • MD5

    908bbf2b6a34afd35afe853deafac8b1

  • SHA1

    6ad78aaae0a9ebe3f46dcb6428e1a8ec9ec76347

  • SHA256

    8683e01a9774cd814971149d9569ae0ad6a9923bc30ed7f55ca0b4c5a6e13985

  • SHA512

    26806b72fdf811e98a21c0c777324c8dcea8e068690ffb2e33c7ad0b3d3b78bdc60c356b593b5e191fc9fd533aa3622419ee94137e9b523e9ae00d9d35ca493d

  • SSDEEP

    768:rufKFLQR+vDq2eNSWdvI21c/9FrOyfW2xqR/M9RG/2Z1w07rKBy3:ru+vvQSWdyFrtR0MRxZ1w07rZ

Malware Config

Targets

    • Target

      908bbf2b6a34afd35afe853deafac8b1

    • Size

      37KB

    • MD5

      908bbf2b6a34afd35afe853deafac8b1

    • SHA1

      6ad78aaae0a9ebe3f46dcb6428e1a8ec9ec76347

    • SHA256

      8683e01a9774cd814971149d9569ae0ad6a9923bc30ed7f55ca0b4c5a6e13985

    • SHA512

      26806b72fdf811e98a21c0c777324c8dcea8e068690ffb2e33c7ad0b3d3b78bdc60c356b593b5e191fc9fd533aa3622419ee94137e9b523e9ae00d9d35ca493d

    • SSDEEP

      768:rufKFLQR+vDq2eNSWdvI21c/9FrOyfW2xqR/M9RG/2Z1w07rKBy3:ru+vvQSWdyFrtR0MRxZ1w07rZ

    • Modifies AppInit DLL entries

    • Deletes itself

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks