General

  • Target
    7afe4acc20170439d8b180ae4b84715d.exe
  • Size 719KB
  • Sample210409-vpzwhm47ls
  • SHA256 c3fd41da298b657f36085d828012a94c9979400b753c028eb26d0a6fb50b05bb
  • MD5 SHA1 SHA512

Malware Config

Targets

    • Target
      7afe4acc20170439d8b180ae4b84715d.exe
    • Size 719KB
    • SHA256 c3fd41da298b657f36085d828012a94c9979400b753c028eb26d0a6fb50b05bb
    • MD5 SHA1 SHA512
    • Executes dropped EXE

    • Drops startup file

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks