Description
Looks up country code configured in the registry, likely geofence.
004a8cc310aff8ac66cdf102844ef37a728f54963eaaf083a82c3a18ae3021fa
General
Target
Size
Sample
004a8cc310aff8ac66cdf102844ef37a728f54963eaaf083a82c3a18ae3021fa
632KB
220516-zctt5sbbcm
Score
7 /10
MD5
SHA1
SHA256
SHA512
655803ae75ec3b85d18598bb56df3ae6
0b43f6dd5d6968d4fe3ee0cd97de5c60e7fd02b0
004a8cc310aff8ac66cdf102844ef37a728f54963eaaf083a82c3a18ae3021fa
6f96f2011cf72c97aa46f60988684d835a9442a7b83689710dc23a5bedf4efa4c7e96eb0b2a69dd673dc44d1bda0397b79b49578c62408f1e55bf5d7e0cb3c3e
Malware Config
Targets
Target
MD5
Filesize
004a8cc310aff8ac66cdf102844ef37a728f54963eaaf083a82c3a18ae3021fa
655803ae75ec3b85d18598bb56df3ae6
632KB
Score
7/10
SHA1
SHA256
SHA512
0b43f6dd5d6968d4fe3ee0cd97de5c60e7fd02b0
004a8cc310aff8ac66cdf102844ef37a728f54963eaaf083a82c3a18ae3021fa
6f96f2011cf72c97aa46f60988684d835a9442a7b83689710dc23a5bedf4efa4c7e96eb0b2a69dd673dc44d1bda0397b79b49578c62408f1e55bf5d7e0cb3c3e
Tags
Signatures
-
Checks computer location settings
-
Loads dropped DLL
-
Reads user/profile data of web browsers
Description
Infostealers often target stored browser data, which can include saved credentials etc.
Tags
TTPs
-
Checks installed software on the system
Description
Looks up Uninstall key entries in the registry to enumerate software on the system.
Tags
TTPs
-
Installs/modifies Browser Helper Object
Description
BHOs are DLL modules which act as plugins for Internet Explorer.
Tags
TTPs
-
Drops file in System32 directory
Related Tasks
MITRE ATT&CK Matrix
Collection
Command and Control
Credential Access
Defense Evasion
Execution
Exfiltration
Impact
Initial Access
Lateral Movement
Persistence
Privilege Escalation
Tasks