General

  • Target

    BonziBuddy432.exe

  • Size

    49.9MB

  • Sample

    240522-3rhl7sdf2y

  • MD5

    06d87d4c89c76cb1bcb2f5a5fc4097d1

  • SHA1

    657248f78abfa9015b77c431f2fd8797481478fd

  • SHA256

    f1e859d99072e35f20e172d8458e3ea1baf8ba86c8c9e311a0debcd2acd5d0fc

  • SHA512

    12bcc681544bfc0cb5f1a3c2e5e3d475efdf5abb8bf0e18cb18f529a82d551f39e16de2d3f0664c2c2cbfab2bc4702e256b958acadca53424e6d8760b6f457f9

  • SSDEEP

    1572864:HVGKQzdb8P3XxxOtGpBXFqRDjSghMDDqRDAtzq9:HVcdeXzOoP1OjfgDOo2

Malware Config

Targets

    • Target

      BonziBuddy432.exe

    • Size

      49.9MB

    • MD5

      06d87d4c89c76cb1bcb2f5a5fc4097d1

    • SHA1

      657248f78abfa9015b77c431f2fd8797481478fd

    • SHA256

      f1e859d99072e35f20e172d8458e3ea1baf8ba86c8c9e311a0debcd2acd5d0fc

    • SHA512

      12bcc681544bfc0cb5f1a3c2e5e3d475efdf5abb8bf0e18cb18f529a82d551f39e16de2d3f0664c2c2cbfab2bc4702e256b958acadca53424e6d8760b6f457f9

    • SSDEEP

      1572864:HVGKQzdb8P3XxxOtGpBXFqRDjSghMDDqRDAtzq9:HVcdeXzOoP1OjfgDOo2

    • Modifies Installed Components in the registry

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks