General

  • Target

    c68dd9ae84fd6ca45f518a486750cbad

  • Size

    124KB

  • Sample

    240313-wwt3gaea36

  • MD5

    c68dd9ae84fd6ca45f518a486750cbad

  • SHA1

    70dc3b5d9afe737fb130a4b938cb08efacb1b6ff

  • SHA256

    c50232cb8b5ff331b785c1c04cfdbaaaa7aafe5423e1b8edf06be16457628add

  • SHA512

    7f8755e9627402797852da538b6cfa8233703fcabf4be831e2cee5c9a833ea99eaefb629d5d2bdc14d7da121caca98d67482a67a2560e1509dd60f29e47dd35e

  • SSDEEP

    3072:9tt1+f8ko7Oh6tnhj7TezuSOhsF4OBT1g2Db8Wk:9/1eVhI/TeqsFnfBD4Wk

Score
7/10

Malware Config

Targets

    • Target

      c68dd9ae84fd6ca45f518a486750cbad

    • Size

      124KB

    • MD5

      c68dd9ae84fd6ca45f518a486750cbad

    • SHA1

      70dc3b5d9afe737fb130a4b938cb08efacb1b6ff

    • SHA256

      c50232cb8b5ff331b785c1c04cfdbaaaa7aafe5423e1b8edf06be16457628add

    • SHA512

      7f8755e9627402797852da538b6cfa8233703fcabf4be831e2cee5c9a833ea99eaefb629d5d2bdc14d7da121caca98d67482a67a2560e1509dd60f29e47dd35e

    • SSDEEP

      3072:9tt1+f8ko7Oh6tnhj7TezuSOhsF4OBT1g2Db8Wk:9/1eVhI/TeqsFnfBD4Wk

    Score
    7/10
    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks