General

  • Target

    5ec6c811a8d46eb2195ff31ba92ba6bd09711c428047459ff180551ad184255d

  • Size

    494KB

  • Sample

    201111-71tm33v19n

  • MD5

    af4db3a6b648b585f8e11b9ff5be73f2

  • SHA1

    5aa8bb73dc964ff9a311eb28c4e16a305971ac7f

  • SHA256

    5ec6c811a8d46eb2195ff31ba92ba6bd09711c428047459ff180551ad184255d

  • SHA512

    ec3b9afe70581a7e34c470aebea85e4c6dfb2bf3d37c7c0a17e3cd39af42a966300894711f872a19cdd11466ae00a2a08015850842f8ed6fe0d94e53a0a34658

Score
7/10

Malware Config

Targets

    • Target

      5ec6c811a8d46eb2195ff31ba92ba6bd09711c428047459ff180551ad184255d

    • Size

      494KB

    • MD5

      af4db3a6b648b585f8e11b9ff5be73f2

    • SHA1

      5aa8bb73dc964ff9a311eb28c4e16a305971ac7f

    • SHA256

      5ec6c811a8d46eb2195ff31ba92ba6bd09711c428047459ff180551ad184255d

    • SHA512

      ec3b9afe70581a7e34c470aebea85e4c6dfb2bf3d37c7c0a17e3cd39af42a966300894711f872a19cdd11466ae00a2a08015850842f8ed6fe0d94e53a0a34658

    Score
    7/10
    • Loads dropped DLL

    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • JavaScript code in executable

MITRE ATT&CK Enterprise v6

Tasks