General

  • Target

    bf630cebf35793dcb1762e3580d2a1c0

  • Size

    129KB

  • Sample

    240311-azzapsfh6v

  • MD5

    bf630cebf35793dcb1762e3580d2a1c0

  • SHA1

    c7b7d73056c652ab2ebe4c40ddac762f0486f788

  • SHA256

    3b80986a7e5ae5c055af1f1a57b41710bb3cbf6767bc4a6ded5045f20b7765e8

  • SHA512

    789ef515b2763d44c8d8ee2f7fe6681c489cc7cbadac6600af82ef614ddc39f5909597f11909a80dc679ea6566df760d2fdfa610841bf58bbcf1a603d142cb3e

  • SSDEEP

    1536:RjvrfBPnTiqtLGXa8t5WJ0Yl5ev6cH5h3meXFdSkyxBYXYXUsCn40ch9WLp34zcj:Rt1LGK8avSLaooXUX691gtcvpOeXN3k

Score
7/10

Malware Config

Targets

    • Target

      bf630cebf35793dcb1762e3580d2a1c0

    • Size

      129KB

    • MD5

      bf630cebf35793dcb1762e3580d2a1c0

    • SHA1

      c7b7d73056c652ab2ebe4c40ddac762f0486f788

    • SHA256

      3b80986a7e5ae5c055af1f1a57b41710bb3cbf6767bc4a6ded5045f20b7765e8

    • SHA512

      789ef515b2763d44c8d8ee2f7fe6681c489cc7cbadac6600af82ef614ddc39f5909597f11909a80dc679ea6566df760d2fdfa610841bf58bbcf1a603d142cb3e

    • SSDEEP

      1536:RjvrfBPnTiqtLGXa8t5WJ0Yl5ev6cH5h3meXFdSkyxBYXYXUsCn40ch9WLp34zcj:Rt1LGK8avSLaooXUX691gtcvpOeXN3k

    Score
    7/10
    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks