General

  • Target

    c96f4b79502c4a88af0ed0935a0d5f13.dll

  • Size

    126KB

  • Sample

    220508-h3vqpadffn

  • MD5

    c96f4b79502c4a88af0ed0935a0d5f13

  • SHA1

    0976ef12d339a9ccd1d255d5d6f8d8f5198cd3a1

  • SHA256

    1b53bf7d983101f59b0ea151b63eb925e5f703af4605388e90814c519225e22c

  • SHA512

    8b5cff4daf9dd29e3c49ceec29cabc7a094e4d2c89fe18d589d73d0113575987bc7db0b1492d2862c275a4f04ecbdc64a694d9637c12b5d71b36d030dc735486

Malware Config

Targets

    • Target

      c96f4b79502c4a88af0ed0935a0d5f13.dll

    • Size

      126KB

    • MD5

      c96f4b79502c4a88af0ed0935a0d5f13

    • SHA1

      0976ef12d339a9ccd1d255d5d6f8d8f5198cd3a1

    • SHA256

      1b53bf7d983101f59b0ea151b63eb925e5f703af4605388e90814c519225e22c

    • SHA512

      8b5cff4daf9dd29e3c49ceec29cabc7a094e4d2c89fe18d589d73d0113575987bc7db0b1492d2862c275a4f04ecbdc64a694d9637c12b5d71b36d030dc735486

    • Reads local data of messenger clients

      Infostealers often target stored data of messaging applications, which can include saved credentials and account information.

    • Accesses Microsoft Outlook profiles

MITRE ATT&CK Enterprise v6

Tasks