General

  • Target

    a818e774faa8c61bbdd722f7b15dae05

  • Size

    473KB

  • Sample

    201117-f53w8dx6aj

  • MD5

    df33628f8659378343e8914fb7fa87de

  • SHA1

    54e38c1ac0ad1d041d55cb6bd34e04ef84eed678

  • SHA256

    a95f75dfe884a4503d2028aed2cc6415306476b5c08156e064952a5546e9b71d

  • SHA512

    a0f9d2e1d5174dc4c34b7d1dd2e740f3d5d8a75622c1889b8778691e46f8233d70e7cc996baba7386850bcbb625b5b8a201a3e665a96059e21267ca87da1ea8f

Score
7/10

Malware Config

Targets

    • Target

      a818e774faa8c61bbdd722f7b15dae05

    • Size

      473KB

    • MD5

      df33628f8659378343e8914fb7fa87de

    • SHA1

      54e38c1ac0ad1d041d55cb6bd34e04ef84eed678

    • SHA256

      a95f75dfe884a4503d2028aed2cc6415306476b5c08156e064952a5546e9b71d

    • SHA512

      a0f9d2e1d5174dc4c34b7d1dd2e740f3d5d8a75622c1889b8778691e46f8233d70e7cc996baba7386850bcbb625b5b8a201a3e665a96059e21267ca87da1ea8f

    Score
    7/10
    • Loads dropped DLL

    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • JavaScript code in executable

MITRE ATT&CK Matrix ATT&CK v6

Defense Evasion

Install Root Certificate

1
T1130

Modify Registry

1
T1112

Credential Access

Credentials in Files

2
T1081

Discovery

Query Registry

1
T1012

Collection

Data from Local System

2
T1005

Tasks