General

  • Target

    IMG_20240131_120707.jpg

  • Size

    141KB

  • Sample

    240213-yv9gwagg7z

  • MD5

    26763071caffd24ee6b4fe0c190934ff

  • SHA1

    d82dc97458a41994c6258fcd6814e99548b9aa7e

  • SHA256

    6528240804ba7ed158b7559a71067b46b68d5485414b3191a391b8dcdf7a35a4

  • SHA512

    9a87b9d898c25b34413f5e2c6f075663be5f0bd4197e3675b1d52d6553f015c935142282bafb00061f2a574cb57337e2de86d1199fbaf658a1986ff0d5d8f974

  • SSDEEP

    3072:/IH06NZbtTMAAtzflUsZGR8Qf9VRjq67i52j7LwVWWLTY:0ZbtTMBtfB8R8QvRjhhcVhY

Malware Config

Targets

    • Target

      IMG_20240131_120707.jpg

    • Size

      141KB

    • MD5

      26763071caffd24ee6b4fe0c190934ff

    • SHA1

      d82dc97458a41994c6258fcd6814e99548b9aa7e

    • SHA256

      6528240804ba7ed158b7559a71067b46b68d5485414b3191a391b8dcdf7a35a4

    • SHA512

      9a87b9d898c25b34413f5e2c6f075663be5f0bd4197e3675b1d52d6553f015c935142282bafb00061f2a574cb57337e2de86d1199fbaf658a1986ff0d5d8f974

    • SSDEEP

      3072:/IH06NZbtTMAAtzflUsZGR8Qf9VRjq67i52j7LwVWWLTY:0ZbtTMBtfB8R8QvRjhhcVhY

    • Downloads MZ/PE file

    • Modifies Installed Components in the registry

    • Sets file execution options in registry

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Registers COM server for autorun

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Checks whether UAC is enabled

    • Drops desktop.ini file(s)

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

    • Checks system information in the registry

      System information is often read in order to detect sandboxing environments.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks