Resubmissions
01-10-2024 01:16
241001-bm3yssxgme 10General
-
Target
BraveBrowserSetup-BRV002.exe
-
Size
74.9MB
-
Sample
241001-bm3yssxgme
-
MD5
ada87dcb3da141847db23c908e401d97
-
SHA1
d87d4f2bc0fc7d529eef3793429e18af6231f1e7
-
SHA256
104f8ddf10d61108a7815aa33690eff037ac6fcd7528c4c4a45a202b71d91093
-
SHA512
1204eaeea9392a20b73c1dcaa4090fd54d5dc1d56eff2b345633262fbe2f4a25bc4d8b43f59eb75c7710957aad94483fc82b82bb2c788e8c59e74c9d74a3003d
-
SSDEEP
1572864:ZGu/x6vSa4mq+703SZurRov2WS0SJwyQPYymwjnbjiHk:ZGx6r+/srWW19QP/jnbjiE
Static task
static1
Behavioral task
behavioral1
Sample
BraveBrowserSetup-BRV002.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
BraveBrowserSetup-BRV002.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
BraveBrowserSetup-BRV002.exe
-
Size
74.9MB
-
MD5
ada87dcb3da141847db23c908e401d97
-
SHA1
d87d4f2bc0fc7d529eef3793429e18af6231f1e7
-
SHA256
104f8ddf10d61108a7815aa33690eff037ac6fcd7528c4c4a45a202b71d91093
-
SHA512
1204eaeea9392a20b73c1dcaa4090fd54d5dc1d56eff2b345633262fbe2f4a25bc4d8b43f59eb75c7710957aad94483fc82b82bb2c788e8c59e74c9d74a3003d
-
SSDEEP
1572864:ZGu/x6vSa4mq+703SZurRov2WS0SJwyQPYymwjnbjiHk:ZGx6r+/srWW19QP/jnbjiE
Score10/10-
Detects HijackLoader (aka IDAT Loader)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of SetThreadContext
-