Resubmissions

05-12-2020 00:17

201205-6cw1vqdsze 7

05-12-2020 00:13

201205-184e856542 7

05-12-2020 00:10

201205-7h2wyzrtwj 7

General

  • Target

    222.rtf

  • Size

    558B

  • Sample

    201205-184e856542

  • MD5

    12cd195006a94bf0b4fadab0f247983d

  • SHA1

    c4c5a9e84ee9d42f6bebbaabf9f690c0e146467e

  • SHA256

    54f4d9d9a35e226a25c1e0f7c1ff5bdd9a62ecfb51efa90ce81f48cb46be416d

  • SHA512

    54eacc3ea2a45a1512c45185432d6cc478d4109f5368daff6b2e73c248e196158fed7d2a296b23a29c4a25827585bfd7d7538d47ac8928a2a1ff80a70618eab4

Score
7/10

Malware Config

Targets

    • Target

      222.rtf

    • Size

      558B

    • MD5

      12cd195006a94bf0b4fadab0f247983d

    • SHA1

      c4c5a9e84ee9d42f6bebbaabf9f690c0e146467e

    • SHA256

      54f4d9d9a35e226a25c1e0f7c1ff5bdd9a62ecfb51efa90ce81f48cb46be416d

    • SHA512

      54eacc3ea2a45a1512c45185432d6cc478d4109f5368daff6b2e73c248e196158fed7d2a296b23a29c4a25827585bfd7d7538d47ac8928a2a1ff80a70618eab4

    Score
    7/10
    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops Chrome extension

MITRE ATT&CK Matrix ATT&CK v6

Defense Evasion

Modify Registry

1
T1112

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Collection

Data from Local System

1
T1005

Tasks