004a8cc310aff8ac66cdf102844ef37a728f54963eaaf083a82c3a18ae3021fa

General
Target

004a8cc310aff8ac66cdf102844ef37a728f54963eaaf083a82c3a18ae3021fa

Size

632KB

Sample

220516-zctt5sbbcm

Score
7 /10
MD5

655803ae75ec3b85d18598bb56df3ae6

SHA1

0b43f6dd5d6968d4fe3ee0cd97de5c60e7fd02b0

SHA256

004a8cc310aff8ac66cdf102844ef37a728f54963eaaf083a82c3a18ae3021fa

SHA512

6f96f2011cf72c97aa46f60988684d835a9442a7b83689710dc23a5bedf4efa4c7e96eb0b2a69dd673dc44d1bda0397b79b49578c62408f1e55bf5d7e0cb3c3e

Malware Config
Targets
Target

004a8cc310aff8ac66cdf102844ef37a728f54963eaaf083a82c3a18ae3021fa

MD5

655803ae75ec3b85d18598bb56df3ae6

Filesize

632KB

Score
7/10
SHA1

0b43f6dd5d6968d4fe3ee0cd97de5c60e7fd02b0

SHA256

004a8cc310aff8ac66cdf102844ef37a728f54963eaaf083a82c3a18ae3021fa

SHA512

6f96f2011cf72c97aa46f60988684d835a9442a7b83689710dc23a5bedf4efa4c7e96eb0b2a69dd673dc44d1bda0397b79b49578c62408f1e55bf5d7e0cb3c3e

Tags

Signatures

  • Checks computer location settings

    Description

    Looks up country code configured in the registry, likely geofence.

    TTPs

    Query RegistrySystem Information Discovery
  • Loads dropped DLL

  • Reads user/profile data of web browsers

    Description

    Infostealers often target stored browser data, which can include saved credentials etc.

    Tags

    TTPs

    Data from Local SystemCredentials in Files
  • Checks installed software on the system

    Description

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    Tags

    TTPs

    Query Registry
  • Installs/modifies Browser Helper Object

    Description

    BHOs are DLL modules which act as plugins for Internet Explorer.

    Tags

    TTPs

    Modify RegistryBrowser Extensions
  • Drops file in System32 directory

Related Tasks

MITRE ATT&CK Matrix
Command and Control
    Credential Access
    Defense Evasion
    Execution
      Exfiltration
        Impact
          Initial Access
            Lateral Movement
              Persistence
              Privilege Escalation
                Tasks

                static1

                1/10