General

  • Target
    https://www.bing.com/ck/a?!&&p=aca52a7817eeedba5cc71cfa678611b7bd8de8fd6d0d8c56d860b8c3437480daJmltdHM9MTc4MzU1NTIwMA&ptn=3&ver=2&hsh=4&fclid=23d279d6-1586-69ec-0b9a-6f1714f86817&psq=brave+browser+downlod&u=a1aHR0cHM6Ly9hcHBzLm1pY3Jvc29mdC5jb20vZGV0YWlsL1hQOEM5UVpNUzJQQzFUP2xhdW5jaD10cnVlJm1vZGU9ZnVsbCZobD1lbi11cyZnbD11cyZvY2lkPWJpbmd3ZWJzZWFyY2g&ntb=1
  • Sample260709-ng5xesht9m
Score
8/10

Malware Config

Targets

    • Target
      https://www.bing.com/ck/a?!&&p=aca52a7817eeedba5cc71cfa678611b7bd8de8fd6d0d8c56d860b8c3437480daJmltdHM9MTc4MzU1NTIwMA&ptn=3&ver=2&hsh=4&fclid=23d279d6-1586-69ec-0b9a-6f1714f86817&psq=brave+browser+downlod&u=a1aHR0cHM6Ly9hcHBzLm1pY3Jvc29mdC5jb20vZGV0YWlsL1hQOEM5UVpNUzJQQzFUP2xhdW5jaD10cnVlJm1vZGU9ZnVsbCZobD1lbi11cyZnbD11cyZvY2lkPWJpbmd3ZWJzZWFyY2g&ntb=1
    Score
    8/10
    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks