Overview

overview

10

Static

static

3

BraveBrows...02.exe

windows7-x64

7

BraveBrows...02.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    BraveBrowserSetup-BRV002.exe

  • Size

    74.9MB

  • Sample

    241001-bm3yssxgme

  • MD5

    ada87dcb3da141847db23c908e401d97

  • SHA1

    d87d4f2bc0fc7d529eef3793429e18af6231f1e7

  • SHA256

    104f8ddf10d61108a7815aa33690eff037ac6fcd7528c4c4a45a202b71d91093

  • SHA512

    1204eaeea9392a20b73c1dcaa4090fd54d5dc1d56eff2b345633262fbe2f4a25bc4d8b43f59eb75c7710957aad94483fc82b82bb2c788e8c59e74c9d74a3003d

  • SSDEEP

    1572864:ZGu/x6vSa4mq+703SZurRov2WS0SJwyQPYymwjnbjiHk:ZGx6r+/srWW19QP/jnbjiE

Score
10/10
hijackloaderdiscoveryloader

Malware Config

Targets

    • Target

      BraveBrowserSetup-BRV002.exe

    • Size

      74.9MB

    • MD5

      ada87dcb3da141847db23c908e401d97

    • SHA1

      d87d4f2bc0fc7d529eef3793429e18af6231f1e7

    • SHA256

      104f8ddf10d61108a7815aa33690eff037ac6fcd7528c4c4a45a202b71d91093

    • SHA512

      1204eaeea9392a20b73c1dcaa4090fd54d5dc1d56eff2b345633262fbe2f4a25bc4d8b43f59eb75c7710957aad94483fc82b82bb2c788e8c59e74c9d74a3003d

    • SSDEEP

      1572864:ZGu/x6vSa4mq+703SZurRov2WS0SJwyQPYymwjnbjiHk:ZGx6r+/srWW19QP/jnbjiE

    Score
    10/10
    discoveryhijackloaderloader

    • Detects HijackLoader (aka IDAT Loader)

    • HijackLoader

      HijackLoader is a multistage loader first seen in 2023.

      loaderhijackloader

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks