General

  • Target

    https://interactive-share.com/thank.php?ujrqemt=ibgdmw&clrtjbpiqe=vrsznbgbdsxgxhw&id=386c6270702f6a546731744e6c30716b59643533474b336875584955414f49784d4a7273596250564639754b6f46707032787978463850656150716d6631563657773d3d&voetzdi=huvwypxsph

  • Sample

    210721-lmxqgsr9wx

Malware Config

Targets

    • Target

      https://interactive-share.com/thank.php?ujrqemt=ibgdmw&clrtjbpiqe=vrsznbgbdsxgxhw&id=386c6270702f6a546731744e6c30716b59643533474b336875584955414f49784d4a7273596250564639754b6f46707032787978463850656150716d6631563657773d3d&voetzdi=huvwypxsph

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks