Resubmissions

22/05/2020, 16:28

200522-ysyjrm8xj67

22/05/2020, 16:15

200522-dvss5m5wps7

General

  • Target
    6caa53b30e5a22779b159d7bdef67f66aea567b6f93360c3c79b6a2d5a37e9a5.bin
  • Size 196KB
  • Sample200522-dvss5m5wps
  • SHA256 6caa53b30e5a22779b159d7bdef67f66aea567b6f93360c3c79b6a2d5a37e9a5
  • MD5 SHA1 SHA512

Malware Config

Targets

    • Target
      6caa53b30e5a22779b159d7bdef67f66aea567b6f93360c3c79b6a2d5a37e9a5.bin
    • Size 196KB
    • SHA256 6caa53b30e5a22779b159d7bdef67f66aea567b6f93360c3c79b6a2d5a37e9a5
    • MD5 SHA1 SHA512
    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks whether UAC is enabled

    • Drops Chrome extension

    • Modifies system certificate store

    • Sets desktop wallpaper using registry

MITRE ATT&CK Enterprise v6

Tasks