General

  • Target

    b933dc5e2929ae5c1f44593cf486db36

  • Size

    865KB

  • Sample

    240307-vg1q2ahb5y

  • MD5

    b933dc5e2929ae5c1f44593cf486db36

  • SHA1

    2066f07ea0910928bc8818ade1de13bd4a8d5503

  • SHA256

    79bdb0a0045b4acc1572f7644e94e12bb1d6ebbd4f7247688a603c089af86f06

  • SHA512

    368a4716963017645c18f38f4b4b9e282dd397800f5ac8c2a7f583dfcb64a6cdaf31acc67f39f1dd3bc6e3d23ef1a02336706a71903fea51de72ada20d1063c8

  • SSDEEP

    24576:kbfU+mVbDCiZ8RvXUGstCc/mRNuVEebmwA:JZlDfZ8R/UGJNuVBmwA

Malware Config

Targets

    • Target

      b933dc5e2929ae5c1f44593cf486db36

    • Size

      865KB

    • MD5

      b933dc5e2929ae5c1f44593cf486db36

    • SHA1

      2066f07ea0910928bc8818ade1de13bd4a8d5503

    • SHA256

      79bdb0a0045b4acc1572f7644e94e12bb1d6ebbd4f7247688a603c089af86f06

    • SHA512

      368a4716963017645c18f38f4b4b9e282dd397800f5ac8c2a7f583dfcb64a6cdaf31acc67f39f1dd3bc6e3d23ef1a02336706a71903fea51de72ada20d1063c8

    • SSDEEP

      24576:kbfU+mVbDCiZ8RvXUGstCc/mRNuVEebmwA:JZlDfZ8R/UGJNuVBmwA

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks