General

  • Target

    bcf0d23d8b9360ffb83343217566ed01

  • Size

    23KB

  • Sample

    240309-16q6sacg5s

  • MD5

    bcf0d23d8b9360ffb83343217566ed01

  • SHA1

    474bd576d211eb9001e1525ac2455eae36385d7e

  • SHA256

    e6c7371384099629963bb4ddac2665b2b3c86a5448c2f8584ddb13880657a54d

  • SHA512

    72c0d1dc7b7fda8276f09e0d0aa5ecbb9474abed60a7ce5a59da61b1e8fdadeba4e3bdccab037afe6f05671acb8717df36bb6f94bead4dc7a82a0031d3a368a6

  • SSDEEP

    384:mvBQThlOM0zLi1wmJqpNXNRrdGCTzNnQepkGqIv3B3i/pVyX3EX9Wz:AaThlOPz2NIXN7b1zqMBSjyX3EX9

Malware Config

Targets

    • Target

      bcf0d23d8b9360ffb83343217566ed01

    • Size

      23KB

    • MD5

      bcf0d23d8b9360ffb83343217566ed01

    • SHA1

      474bd576d211eb9001e1525ac2455eae36385d7e

    • SHA256

      e6c7371384099629963bb4ddac2665b2b3c86a5448c2f8584ddb13880657a54d

    • SHA512

      72c0d1dc7b7fda8276f09e0d0aa5ecbb9474abed60a7ce5a59da61b1e8fdadeba4e3bdccab037afe6f05671acb8717df36bb6f94bead4dc7a82a0031d3a368a6

    • SSDEEP

      384:mvBQThlOM0zLi1wmJqpNXNRrdGCTzNnQepkGqIv3B3i/pVyX3EX9Wz:AaThlOPz2NIXN7b1zqMBSjyX3EX9

    • Adds policy Run key to start application

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks