General

  • Target

    d4039cf309b3ce7aa03c2cd877c4daef

  • Size

    43KB

  • Sample

    240318-t92ncsdd76

  • MD5

    d4039cf309b3ce7aa03c2cd877c4daef

  • SHA1

    3f55e49330aa2e5f1aefa47613d74215ce917ed8

  • SHA256

    97e6fc28414d89bc6b059cf4baac05f0bccbaac012e50ffc1d768ad9812f3721

  • SHA512

    0eeac1f3a44ef558375c42f611f6896b499d9f1bb1aafa1679db03e9b01d863e9d58bed13a458bf3a9f90b297a45049090c16118263ddfb8ee9eefed5c8143f4

  • SSDEEP

    768:0M8tiYVAJpX56+5RTjSx078dHmPhFDRrlqE:0riYVABHiDdHQ/llqE

Score
7/10

Malware Config

Targets

    • Target

      d4039cf309b3ce7aa03c2cd877c4daef

    • Size

      43KB

    • MD5

      d4039cf309b3ce7aa03c2cd877c4daef

    • SHA1

      3f55e49330aa2e5f1aefa47613d74215ce917ed8

    • SHA256

      97e6fc28414d89bc6b059cf4baac05f0bccbaac012e50ffc1d768ad9812f3721

    • SHA512

      0eeac1f3a44ef558375c42f611f6896b499d9f1bb1aafa1679db03e9b01d863e9d58bed13a458bf3a9f90b297a45049090c16118263ddfb8ee9eefed5c8143f4

    • SSDEEP

      768:0M8tiYVAJpX56+5RTjSx078dHmPhFDRrlqE:0riYVABHiDdHQ/llqE

    Score
    7/10
    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks