General

  • Target

    b6808541a60db5b65164df9da5bc91c3

  • Size

    809KB

  • Sample

    240306-e2c8gaba2z

  • MD5

    b6808541a60db5b65164df9da5bc91c3

  • SHA1

    c6011c36d4bc0cd3e159c01af356975c8fb4418e

  • SHA256

    da4bba5e2279a86fbebc21b6bdb851e98cf0b7de3ca55aa0fd46175670231a0f

  • SHA512

    fbe53b1f28b124b4aa33df8f892c9d6d062fb4691f4312b0b9df9000358d38a76310f176100b94eaf711033b9f3233ba07113052e70af50bfc8e3d4e800434b0

  • SSDEEP

    24576:ztPdaPXHpBr7M8/6u5U3Pl1lVWp7NRsMKqj69j:RPdaPXHpBf0IsPl1lVgD5m

Malware Config

Targets

    • Target

      b6808541a60db5b65164df9da5bc91c3

    • Size

      809KB

    • MD5

      b6808541a60db5b65164df9da5bc91c3

    • SHA1

      c6011c36d4bc0cd3e159c01af356975c8fb4418e

    • SHA256

      da4bba5e2279a86fbebc21b6bdb851e98cf0b7de3ca55aa0fd46175670231a0f

    • SHA512

      fbe53b1f28b124b4aa33df8f892c9d6d062fb4691f4312b0b9df9000358d38a76310f176100b94eaf711033b9f3233ba07113052e70af50bfc8e3d4e800434b0

    • SSDEEP

      24576:ztPdaPXHpBr7M8/6u5U3Pl1lVWp7NRsMKqj69j:RPdaPXHpBf0IsPl1lVgD5m

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks