MX_Series_Installation_Instructions_BCN-P5968-B_(08.13).pdf

General
Target

MX_Series_Installation_Instructions_BCN-P5968-B_(08.13).pdf

Size

210KB

Sample

201124-114v6258cn

Score
10 /10
MD5

14d0eece7311dfc25f6a47651404a059

SHA1

b902a9ea5fe894f34739e7934f8838cd12e8b39f

SHA256

ad4e8c8612d092d11e80707f562a5ad86ca1ccb049837d2c20cdf696f01cb2a9

SHA512

f8079aca749a399f5029d9685b34899e105c7e90a38f22d40ed5fc170420904abaccd3e91baef086191f51c978e9092b2d2f8516071b32a1acbf8454706a5f05

Malware Config
Targets
Target

MX_Series_Installation_Instructions_BCN-P5968-B_(08.13).pdf

MD5

14d0eece7311dfc25f6a47651404a059

Filesize

210KB

Score
7 /10
SHA1

b902a9ea5fe894f34739e7934f8838cd12e8b39f

SHA256

ad4e8c8612d092d11e80707f562a5ad86ca1ccb049837d2c20cdf696f01cb2a9

SHA512

f8079aca749a399f5029d9685b34899e105c7e90a38f22d40ed5fc170420904abaccd3e91baef086191f51c978e9092b2d2f8516071b32a1acbf8454706a5f05

Tags

Signatures

  • Registers COM server for autorun

    Tags

    TTPs

    Registry Run Keys / Startup Folder

  • Executes dropped EXE

  • Loads dropped DLL

  • Checks installed software on the system

    Description

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    Tags

    TTPs

    Query Registry

  • Modifies service

    Tags

    TTPs

    Modify Registry Modify Existing Service

  • Reads user/profile data of web browsers

    Description

    Infostealers often target stored browser data, which can include saved credentials etc.

    Tags

    TTPs

    Data from Local System Credentials in Files

Related Tasks

behavioral1 behavioral2
MITRE ATT&CK Matrix
Collection
Command and Control
    Credential Access
    Defense Evasion
    Discovery
    Execution
      Exfiltration
        Impact
          Initial Access
            Lateral Movement
              Persistence
              Privilege Escalation
                Tasks

                static1

                behavioral1

                10/10

                behavioral2

                7/10