General

  • Target

    main_setup_x86x64.bin

  • Size

    1.8MB

  • Sample

    210421-46xjn7qp4e

  • MD5

    51da3eb43302642233928bd69ca6e219

  • SHA1

    7d7d696126bde5e8dbab7382d278e40d22cf47da

  • SHA256

    138a3dd2730be8b076caf28f85d3fbd5a987f9587c8b629ca565ac8de1cc9637

  • SHA512

    6956d4a9331ad8b6cf563427c36ddf4981f1cdebd30ec8cdbc6ec2845e0f4762ed2c4d8d3285b0bcd18d698569d2067f58e9fa1e22d77d4be97efd97d1898561

Malware Config

Targets

    • Target

      main_setup_x86x64.bin

    • Size

      1.8MB

    • MD5

      51da3eb43302642233928bd69ca6e219

    • SHA1

      7d7d696126bde5e8dbab7382d278e40d22cf47da

    • SHA256

      138a3dd2730be8b076caf28f85d3fbd5a987f9587c8b629ca565ac8de1cc9637

    • SHA512

      6956d4a9331ad8b6cf563427c36ddf4981f1cdebd30ec8cdbc6ec2845e0f4762ed2c4d8d3285b0bcd18d698569d2067f58e9fa1e22d77d4be97efd97d1898561

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks