General

  • Target
    c71f91be4c1bf1645867ed1d42d80f18ed71de9de1aab54d784af7679b4a59d2.bin
  • Size 536KB
  • Sample220326-bwt29abfcl
  • SHA256 c71f91be4c1bf1645867ed1d42d80f18ed71de9de1aab54d784af7679b4a59d2
  • MD5 SHA1 SHA512

Malware Config

Targets

    • Target
      c71f91be4c1bf1645867ed1d42d80f18ed71de9de1aab54d784af7679b4a59d2.bin
    • Size 536KB
    • SHA256 c71f91be4c1bf1645867ed1d42d80f18ed71de9de1aab54d784af7679b4a59d2
    • MD5 SHA1 SHA512
    • Modifies WinLogon for persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks