General

  • Target
    Facturas.exe
  • Size 909KB
  • Sample200713-mqnpm55c3a
  • SHA256 bbbfb4d66a6d1ff1fb9f476cc8607a2a0b1a0bb27bdaba095a3715489d8e4315
  • MD5 SHA1 SHA512

Malware Config

Targets

    • Target
      Facturas.exe
    • Size 909KB
    • SHA256 bbbfb4d66a6d1ff1fb9f476cc8607a2a0b1a0bb27bdaba095a3715489d8e4315
    • MD5 SHA1 SHA512
    • Deletes itself

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Adds Run entry to start application

    • Checks whether UAC is enabled

    • js

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks