Resubmissions

22/05/2020, 16:28

200522-ysyjrm8xj6 7

22/05/2020, 16:15

200522-dvss5m5wps 7

General

  • Target

    6caa53b30e5a22779b159d7bdef67f66aea567b6f93360c3c79b6a2d5a37e9a5.bin

  • Size

    196KB

  • Sample

    200522-ysyjrm8xj6

  • MD5

    a0d418e31766effadc6a37e81ad21743

  • SHA1

    9ec2753f1a123fcd42d95811e1f3b27547b215d0

  • SHA256

    6caa53b30e5a22779b159d7bdef67f66aea567b6f93360c3c79b6a2d5a37e9a5

  • SHA512

    f11160a126b865e561cd1fc99b5bf25a52bfb0be14fb709ba012a045b26f585456f7f55d2d0a3b5d754e1512771b89d768e40718589fc9c9a16b30c2a07dda74

Malware Config

Targets

    • Target

      6caa53b30e5a22779b159d7bdef67f66aea567b6f93360c3c79b6a2d5a37e9a5.bin

    • Size

      196KB

    • MD5

      a0d418e31766effadc6a37e81ad21743

    • SHA1

      9ec2753f1a123fcd42d95811e1f3b27547b215d0

    • SHA256

      6caa53b30e5a22779b159d7bdef67f66aea567b6f93360c3c79b6a2d5a37e9a5

    • SHA512

      f11160a126b865e561cd1fc99b5bf25a52bfb0be14fb709ba012a045b26f585456f7f55d2d0a3b5d754e1512771b89d768e40718589fc9c9a16b30c2a07dda74

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks whether UAC is enabled

    • Drops Chrome extension

    • Modifies system certificate store

    • Sets desktop wallpaper using registry

MITRE ATT&CK Enterprise v6

Tasks