General

  • Target
    CatFN.bin
  • Size 598KB
  • Sample200629-fpvebmglpa
  • SHA256 b24cb4cd3db305d5451cb3c0d0e60fe578b1fd38aca4be6032fb0ce2f0b786b4
  • MD5 SHA1 SHA512

Malware Config

Targets

    • Target
      CatFN.bin
    • Size 598KB
    • SHA256 b24cb4cd3db305d5451cb3c0d0e60fe578b1fd38aca4be6032fb0ce2f0b786b4
    • MD5 SHA1 SHA512
    • UAC bypass

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks whether UAC is enabled

    • Enumerates connected drives

    • Drops file in System32 directory

    • Sets desktop wallpaper using registry

MITRE ATT&CK Enterprise v6

Tasks