General

  • Target

    Firefox Setup 134.0.1.exe

  • Size

    65.6MB

  • Sample

    250119-p5kf3ayngk

  • MD5

    18538eaa359e3e502e36017b03a432f7

  • SHA1

    c38b316accbe0353603d7574e16fff8c0db96e8e

  • SHA256

    66b5239512feae49a7b74568749eefbb9fce22b695a4479b50d0eb480dacf891

  • SHA512

    11a471ebfa646ae0e6805e909be7150d30ede6dea6c97d0ccbfa971967a9f401b2daf78c4ba64cf74aa27ee68a1908f432b68cb85d9e1938495e6e35d57d909b

  • SSDEEP

    1572864:91BoiXRKL8873xmDGz9+8uwL/i4OWYqQoyOJ7M83Ag0vIjcBm4b:rBomRB83xms95uk/i2PfdtI62

Malware Config

Targets

    • Target

      Firefox Setup 134.0.1.exe

    • Size

      65.6MB

    • MD5

      18538eaa359e3e502e36017b03a432f7

    • SHA1

      c38b316accbe0353603d7574e16fff8c0db96e8e

    • SHA256

      66b5239512feae49a7b74568749eefbb9fce22b695a4479b50d0eb480dacf891

    • SHA512

      11a471ebfa646ae0e6805e909be7150d30ede6dea6c97d0ccbfa971967a9f401b2daf78c4ba64cf74aa27ee68a1908f432b68cb85d9e1938495e6e35d57d909b

    • SSDEEP

      1572864:91BoiXRKL8873xmDGz9+8uwL/i4OWYqQoyOJ7M83Ag0vIjcBm4b:rBomRB83xms95uk/i2PfdtI62

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Event Triggered Execution: Component Object Model Hijacking

      Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks