General

  • Target

    chrome.7z

  • Size

    354.1MB

  • Sample

    240409-yqe3gagf89

  • MD5

    d05c892a792775a64caf586a7f656f4d

  • SHA1

    ee882043acb3e7fab18267cd6899ee70c9d4d236

  • SHA256

    b925768da9a867eb0d356bfc3c98f9d37292c9dae4c003d35ed2a8186d465bfd

  • SHA512

    f4cb1371ada3552f0ef3445d6f782a03ca2b847cfad09955585667d51b43c01e044b3b1d579d5510ee317b161313dbe5cf1f261fcc8067b41bed9278daf908e0

  • SSDEEP

    3145728:CgmVK+OwXL9COA6v/6AN3rv36+4VtEcff09wWdathI6tLgi:Xj16v/vV4HEcXL

Score
10/10

Malware Config

Targets

    • Target

      chrome.7z

    • Size

      354.1MB

    • MD5

      d05c892a792775a64caf586a7f656f4d

    • SHA1

      ee882043acb3e7fab18267cd6899ee70c9d4d236

    • SHA256

      b925768da9a867eb0d356bfc3c98f9d37292c9dae4c003d35ed2a8186d465bfd

    • SHA512

      f4cb1371ada3552f0ef3445d6f782a03ca2b847cfad09955585667d51b43c01e044b3b1d579d5510ee317b161313dbe5cf1f261fcc8067b41bed9278daf908e0

    • SSDEEP

      3145728:CgmVK+OwXL9COA6v/6AN3rv36+4VtEcff09wWdathI6tLgi:Xj16v/vV4HEcXL

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Target

      Chrome-bin/123.0.6312.58/123.0.6312.58.manifest

    • Size

      226B

    • MD5

      2b8c4ec6700d937ab707ff18dd013251

    • SHA1

      604b4b30c8505a66fdf605ecd0b08e569f18d2b9

    • SHA256

      13736521e936de83defdb3df3e3b040ffc67c37e9e31acdd9b2f7b1704740102

    • SHA512

      70c4a1c86795a5cec6964ebe0e35047a3f830af6bc8e18ea67c11e1debb61e3de415b24891de34d6c239342776e25fe73787c4fe7365e34e7215a0f792abae32

    Score
    3/10
    • Target

      Chrome-bin/123.0.6312.58/Extensions/external_extensions.json

    • Size

      99B

    • MD5

      280a9277b0e605e905d7f18b6148eeb7

    • SHA1

      fcaf575897048f55b422a6dbeba943b5d550a908

    • SHA256

      a68cafd7d78d5c671c2560656653f2a4d83ab66d87a8728356a88fb1f477b3e6

    • SHA512

      f31635bc74f9a4b0cf07be2aabab4ec883a6b8e9ac3701b27ebad6b0ca7a88c77699e69118db0ff55b37f73fb759b8f4271e6a5defbe44aab1f6981fb1179b07

    Score
    3/10
    • Target

      Chrome-bin/123.0.6312.58/MEIPreload/manifest.json

    • Size

      238B

    • MD5

      442699c95b20a60470421c6a4d29960f

    • SHA1

      c7317f2d2414c991c21205ba3c68a187b997e3c1

    • SHA256

      44844cf3dde6e80087ae0e6bf0d9326d7ef7d23326d24ac83af0850be26923d2

    • SHA512

      c89cf089f7feeb80c6ded11f1fce84287abe8216a6e05723d1a7faf567c501c043cd1246ff8dbee1240d2d79c41b698ef4cc3459589e68e5bfc5bed7fc3a150b

    Score
    3/10
    • Target

      Chrome-bin/123.0.6312.58/MEIPreload/preloaded_data.pb

    • Size

      8KB

    • MD5

      d5e4c2634eff8a9b3faf432bf406d6d1

    • SHA1

      a691f5c9877079193c1f7dfb16dbc30bb0372ec9

    • SHA256

      c6070a157b4e28d16fbccbd233e93846ddb070c85e1a1bc64469b7a5f1424fad

    • SHA512

      b264e28ac8f111df01c553445aadc7bcdb3f32a38a1a19d3f9d458270dfeaf80efa7144407bd999892022af9dde9dbf8a0e19e7212720e1c6511ea9125afb166

    • SSDEEP

      192:bTOpyeS7AOv6EVp/m3FPKk15jjKVcOmQppXavFbeLfzrLyp:bTOk7AdEugo5jjK+5QppXaBebzrLyp

    Score
    3/10
    • Target

      Chrome-bin/123.0.6312.58/WidevineCdm/LICENSE

    • Size

      473B

    • MD5

      7406820f5d56fda6baffa951c60679d2

    • SHA1

      e7d4894993e506e235d55b3e47aed019d0584148

    • SHA256

      20de375707692099b3132084695377ce5fec0aec05813dedcce094b8eda44386

    • SHA512

      e70868507c08436b51bb4fd7a582ec0bf81ae0fb5d3d3f20374f584574e54eca81f3cb0530fddcf2d1773c33774f5df58f55ed2a45149c86d33e1e50f64c1d36

    Score
    1/10
    • Target

      Chrome-bin/123.0.6312.58/WidevineCdm/_platform_specific/win_x64/widevinecdm.dll

    • Size

      17.8MB

    • MD5

      daf7ef3acccab478aaa7d6dc1c60f865

    • SHA1

      f8246162b97ce4a945feced27b6ea114366ff2ad

    • SHA256

      bc40c7821dcd3fea9923c6912ab1183a942c11b7690cfd79ed148ded0228777e

    • SHA512

      5840a45cfdb12c005e117608b1e5d946e1b2e76443ed39ba940d7f56de4babeab09bee7e64b903eb82bb37624c0a0ef19e9b59fbe2ce2f0e0b1c7a6015a63f75

    • SSDEEP

      393216:aPR9ZiVTK93/u7036bbXHumUMKU5otXJYOJBlC9qkTSgz1:L8J/G036bbemFot2kl1kVz1

    Score
    1/10
    • Target

      Chrome-bin/123.0.6312.58/WidevineCdm/_platform_specific/win_x64/widevinecdm.dll.sig

    • Size

      1KB

    • MD5

      36e5ee071a6f2f03c5d3889de80b0f0d

    • SHA1

      cf6e8ddb87660ef1ef84ae36f97548a2351ac604

    • SHA256

      6be809d16e0944386e45cf605eae0cd2cf46f111d1a6fe999fec813d2c378683

    • SHA512

      99b61896659e558a79f0e9be95286ebf01d31d13b71df6db4923406e88b3ba72584ef2b62e073b2f5e06901af2c7d1b92d3d12187fe5b4b29c9dd2678444f34e

    Score
    3/10
    • Target

      Chrome-bin/123.0.6312.58/WidevineCdm/manifest.json

    • Size

      938B

    • MD5

      cec2af9c8b0737e9356d928cad4a87da

    • SHA1

      05075a8ada9a8d7e7c3846b1d2156c994923012c

    • SHA256

      9e06a60b746af56a867bbe5e1c11fdcaf7057f99d2ef21fed1ddf9cc3d7d2cff

    • SHA512

      7399cba4e036620d65f2750ae35de5f1149dea8e37f6824d6e7dc09978bc7401c12b7a12bb74449b96d7c8a8962ee10a4aba680f5ef6fb4ff951c599fad8ddeb

    Score
    3/10
    • Target

      Chrome-bin/123.0.6312.58/chrome.dll

    • Size

      221.5MB

    • MD5

      0f78e3fcfd02aa0e4dbfab6855b8eccc

    • SHA1

      3996a5b7f3ce8f5a107c7b0c3b82af3847492612

    • SHA256

      3a5519b32bdddb007b91daf26c5d6eb54f84abf23dba4ea175c792bd8d16d61d

    • SHA512

      c6bc735901a0bf1787764fed97a348d7abd09245baecb30d4f3ed8b39a1ef8b8142f438c31d273f9853a158ccc8a43bb0d67c5421d49a25d47e587e62e5486c7

    • SSDEEP

      1572864:5biCwZcpUabWuareZul6TuD3A2Yzz+sy+fwFL3XtEcUOe7vbFVhEFxkuahJGbo40:D3rv36+4VtEcffo

    Score
    1/10
    • Target

      Chrome-bin/123.0.6312.58/chrome.dll.sig

    • Size

      1KB

    • MD5

      a66e10c82219bbc1fbfbf524f691cdd8

    • SHA1

      41864859501b736c4797840ec23f236309ad2349

    • SHA256

      304e37e3bfde9b4290270ec263a1d156cd0faeec7576145b85cbeebe3d5df2bb

    • SHA512

      656ec1fed56ce2f391310536b90a1088ec2f8fa6ad165e40e969d7dc9767f87de3ff5ef42e62da55f87167d71f622fa920206f9d8b0dea557f07e870c90cd78a

    Score
    3/10
    • Target

      Chrome-bin/123.0.6312.58/chrome.exe.sig

    • Size

      1KB

    • MD5

      df1cc17bdc8a4b9e3cd509d654e693fa

    • SHA1

      3f4d4e8ce9add2dcb77e30f737b00b48c248770b

    • SHA256

      5b44484aa4106df9a9c56392fe63d99849ebade84abcbdef54b63672407b18b2

    • SHA512

      eb99c554f290feb3e4bcdb8a15484b8aa587c115a74b53451b5484c53a235b7f2019b1e60a1cb0da3f9a501b332edfa460685e8cfc622c1a008f08c2dd00c1d7

    Score
    3/10
    • Target

      Chrome-bin/123.0.6312.58/chrome_elf.dll

    • Size

      1.2MB

    • MD5

      95de84cb65f01f1fe2cf8241216374b0

    • SHA1

      322bc7920a7dddce083708d26ed31de93d1d66e9

    • SHA256

      ed0bf5246834ba20e2038151e14e9a6730b2be14edfdb1862e61577a31917643

    • SHA512

      f5678cc882bc8d3643296f646d65481a4c22d526b061a783ea781d1de7b06171da763a52e631320502274669979dcbbf05c3c33767dcacca2dbea57f2d758177

    • SSDEEP

      24576:hvWG0SKrRaeSlLjVt6olG+1QnLRz1LUQy:hvWjf1ilLjVsog+GLRBU9

    Score
    1/10
    • Target

      Chrome-bin/123.0.6312.58/chrome_pwa_launcher.exe

    • Size

      1.3MB

    • MD5

      3bc379b1781ca539e2a1a833cb7542d5

    • SHA1

      a714bb74f15c8f5fa02a3243b157aa36c75f1315

    • SHA256

      d165d240c1dde48f0ba9fa922d4e0619d1d6cce42a76b305bc96118d9684ff9e

    • SHA512

      e2e41ae8f6d2cbe4fbc74c929e668f6099a5042525e5645dcc2a6d0c19613739c569ffd8b5413869f82c6fa80d921982b2f69feba28a0d0e85f9aa5654690e03

    • SSDEEP

      12288:Q6v2Eh0Re8aVC7k2O91hapL50mvnYAeKqILAK/V9IY6p2L1oko2q+3t:6gN8A4ghs0m/YOn/V75fd

    Score
    1/10
    • Target

      Chrome-bin/123.0.6312.58/chrome_wer.dll

    • Size

      121KB

    • MD5

      98411c85e02df4f526b05f3ae5c7b72c

    • SHA1

      2a801005efc4ec182aae979661cbaba26ff0a660

    • SHA256

      627aa10c7d7924b05375e8917fbead4d37b5d9b48208bb47fb032cbcfbc9f7d3

    • SHA512

      69cee491ddd620208636f2136b3e75a8b0c1eb99a689ff5fcbd05fe1b9460d9a1036fb7dc5fcb4ccbb00cc1042398aec4f83ab7126634d9393cb1a6361f3903e

    • SSDEEP

      3072:iJB7frfe/i1+evBJA9CZQ1CLXAtpFrpqpqpvKINZw8cr8+q:iJhrfe/i5pXy1CeOe

    Score
    1/10
    • Target

      Chrome-bin/123.0.6312.58/d3dcompiler_47.dll

    • Size

      4.7MB

    • MD5

      2191e768cc2e19009dad20dc999135a3

    • SHA1

      f49a46ba0e954e657aaed1c9019a53d194272b6a

    • SHA256

      7353f25dc5cf84d09894e3e0461cef0e56799adbc617fce37620ca67240b547d

    • SHA512

      5adcb00162f284c16ec78016d301fc11559dd0a781ffbeff822db22efbed168b11d7e5586ea82388e9503b0c7d3740cf2a08e243877f5319202491c8a641c970

    • SSDEEP

      49152:KCZnRO4XyM53Rkq4ypQqdoRpmruVNYvkaRwvhiD0N+YEzI4og/RfzHLeHTRhFRNc:xG2QCwmHPnog/pzHAo/A6l

    Score
    1/10
    • Target

      Chrome-bin/123.0.6312.58/default_apps/external_extensions.json

    • Size

      291B

    • MD5

      708428751d01199ed5f53e0fb2ad4bf0

    • SHA1

      93f563a090f7ee511d8774c8af4f8ff46f0d66e6

    • SHA256

      579032cb7b7bea083e077ba85cb62dc231ba672f93ce1b55a379968fb3c2cee9

    • SHA512

      4a75eeaa2a973d7f726dd10e7769a22e9fdd084d9ec8a1cba742fbb66f0a6a6343421c9fdf58c61b91920d2f3dcc99c705a2844d33b53f8fcf3d38a909b5a00b

    Score
    3/10
    • Target

      Chrome-bin/123.0.6312.58/dxcompiler.dll

    • Size

      20.8MB

    • MD5

      ab2cc84a98d05ab8b540a9ad3a48ab15

    • SHA1

      d59736cefc5bb2d6fc429a5027bbb5b69039b555

    • SHA256

      3e41929571bd1307e71bc851dfe7a37c8657bb16a8387217e09660c46e8b57b3

    • SHA512

      84bc192b9232dbc427c2fb7d98727960f6f57fe769e097cfe8581feb778b54df8a6aaa8faac5cc060a2c137e10208e47a5529551aacde345a8fb2152796ebc47

    • SSDEEP

      393216:AUWnI3LyrngF82KMV+mQvB0WK0j6DWu016PN:srnFj6DWuo6l

    Score
    1/10
    • Target

      Chrome-bin/123.0.6312.58/dxil.dll

    • Size

      1.4MB

    • MD5

      cb72bef6ce55aa7c9e3a09bd105dca33

    • SHA1

      d48336e1c8215ccf71a758f2ff7e5913342ea229

    • SHA256

      47ffdbd85438891b7963408ea26151ba26ae1b303bbdab3a55f0f11056085893

    • SHA512

      c89eebcf43196f8660eee19ca41cc60c2a00d93f4b3bf118fe7a0deccb3f831cac0db04b2f0c5590fa8d388eb1877a3706ba0d58c7a4e38507c6e64cfd6a50a0

    • SSDEEP

      24576:LCfhbh3v3mtZDiAQeWj26k41ob2nrZ1rqpegQDJqoZtp22GkmgA9u808jQPEdkr1:LCfhbh3v3mtEAQrW41obCraeRhy9ou6r

    Score
    1/10
    • Target

      Chrome-bin/123.0.6312.58/elevation_service.exe

    • Size

      1.6MB

    • MD5

      33767932ddde8c40b67691e5c4956969

    • SHA1

      e8d4c03b7c85a56498710f1133ce51ebdd529263

    • SHA256

      74278fe4de4d7ccf4b52a60a0ee541d4bbad7718eaa644db42b5f108afed733e

    • SHA512

      0b403824e729e5a99910895eda0d8eaf63208bd426c69e3c8fe64668914b8fcff38a9f2bb769bb5b0fc2d9575428bc343f03fd30e4b0f291484160a32fecbde4

    • SSDEEP

      24576:g59bLYf+7ripNvI7wi/HIIgq3CBLFrFXoA6jwP5ExbkJY9k+g:g59PYHvI7wi/HIKuLFrFXlMW6xbgZ

    Score
    1/10

MITRE ATT&CK Matrix ATT&CK v13

Discovery

Query Registry

1
T1012

System Information Discovery

11
T1082

Tasks