General

  • Target

    f07bc9712edafb1ca9d06cd752c5cbbda305ec5451da671d8270237e0ade0dd1

  • Size

    39.4MB

  • Sample

    240525-3gpb1afb52

  • MD5

    7395ec322503ac6a75b27b7727bf096f

  • SHA1

    cec6f6deb70d2713e0ea506544060e812cfcc5e9

  • SHA256

    f07bc9712edafb1ca9d06cd752c5cbbda305ec5451da671d8270237e0ade0dd1

  • SHA512

    ec32e9cf17e1a55e6896fe9c8b4ba18d7de7827c52bb9b54fb9e6277602a0ba9dca35168e4742afc105a11d66da493d7fab99e56976db014b4d266e8eca7c113

  • SSDEEP

    786432:Jkxc4BiiqqeuC9H607Yd0FPAwt3f3DXXo1wg+37TLYVzvWVHO:Jsdqqez9H7wWPRt3f3bXo1wNg

Malware Config

Targets

    • Target

      f07bc9712edafb1ca9d06cd752c5cbbda305ec5451da671d8270237e0ade0dd1

    • Size

      39.4MB

    • MD5

      7395ec322503ac6a75b27b7727bf096f

    • SHA1

      cec6f6deb70d2713e0ea506544060e812cfcc5e9

    • SHA256

      f07bc9712edafb1ca9d06cd752c5cbbda305ec5451da671d8270237e0ade0dd1

    • SHA512

      ec32e9cf17e1a55e6896fe9c8b4ba18d7de7827c52bb9b54fb9e6277602a0ba9dca35168e4742afc105a11d66da493d7fab99e56976db014b4d266e8eca7c113

    • SSDEEP

      786432:Jkxc4BiiqqeuC9H607Yd0FPAwt3f3DXXo1wg+37TLYVzvWVHO:Jsdqqez9H7wWPRt3f3bXo1wNg

    • Modifies firewall policy service

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

    • Modifies Windows Firewall

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks