General

  • Target

    be0cb62c92976c4a52d5488d84dfb587

  • Size

    24KB

  • Sample

    240310-jj3smafe58

  • MD5

    be0cb62c92976c4a52d5488d84dfb587

  • SHA1

    35ef11376755a5d13cd92c0e727f4c0f9757ba10

  • SHA256

    96e801e324f838125d8bdbd11d693e2236934f872e1bd4ace794af39d75aefdf

  • SHA512

    7efd5923a21bb505e50ca677f0bc623f2f00657449d6ccbb0b84a02880206c6dd776d47e21bbdb24a0eeebc864a2d48d19f4d4e51dd2374c51e5dc7358bb2a8e

  • SSDEEP

    768:EGdO91aD5d7kCNTfashquZOa+tRn9E2i3NrkL6TZvUE4ougCC:G918p1hqcONavNrksF8opCC

Malware Config

Targets

    • Target

      be0cb62c92976c4a52d5488d84dfb587

    • Size

      24KB

    • MD5

      be0cb62c92976c4a52d5488d84dfb587

    • SHA1

      35ef11376755a5d13cd92c0e727f4c0f9757ba10

    • SHA256

      96e801e324f838125d8bdbd11d693e2236934f872e1bd4ace794af39d75aefdf

    • SHA512

      7efd5923a21bb505e50ca677f0bc623f2f00657449d6ccbb0b84a02880206c6dd776d47e21bbdb24a0eeebc864a2d48d19f4d4e51dd2374c51e5dc7358bb2a8e

    • SSDEEP

      768:EGdO91aD5d7kCNTfashquZOa+tRn9E2i3NrkL6TZvUE4ougCC:G918p1hqcONavNrksF8opCC

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v15

Tasks