General

  • Target

    https://gcc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fapp.box.com%2Fs%2Fr2dk49pph4ds7qqn2kq57ybs79so6wqk&data=04%7C01%7Cdavid.luna%40twc.state.tx.us%7C9246cb9966f44134b2d708d89874406b%7Cfe7d3f4f241b4af184aa32c57fe9db03%7C0%7C0%7C637426972352358264%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=zweNMGRN4G2hf3gM1Tem4agec7m7P3AOU3r4Cu%2Fg980%3D&reserved=0

  • Sample

    201204-qp4sfah98s

Score
7/10

Malware Config

Targets

    • Target

      https://gcc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fapp.box.com%2Fs%2Fr2dk49pph4ds7qqn2kq57ybs79so6wqk&data=04%7C01%7Cdavid.luna%40twc.state.tx.us%7C9246cb9966f44134b2d708d89874406b%7Cfe7d3f4f241b4af184aa32c57fe9db03%7C0%7C0%7C637426972352358264%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=zweNMGRN4G2hf3gM1Tem4agec7m7P3AOU3r4Cu%2Fg980%3D&reserved=0

    Score
    7/10
    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Matrix ATT&CK v6

Defense Evasion

Modify Registry

1
T1112

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Collection

Data from Local System

1
T1005

Tasks