General

  • Target

    edc12b00df9b14ff11d99f6b98bf439d7544d1e99ebffff4a6b55e633a4fd94b

  • Size

    96KB

  • Sample

    220521-mmjqpscad5

  • MD5

    c9f5c952928877b758b56a95dde47c9b

  • SHA1

    4bfe34e994c0d864e69851ced8c848029a39ae3a

  • SHA256

    edc12b00df9b14ff11d99f6b98bf439d7544d1e99ebffff4a6b55e633a4fd94b

  • SHA512

    4c54e2224f60b5c81b1f5c4e57e4cec5302688b0b25678002b799be8b4da338f27a2ee2872da92848e4d41f1f2e1f0a664b36ab82c66d4ac82f56545f62f5583

Malware Config

Targets

    • Target

      Sverka maj.exe

    • Size

      187KB

    • MD5

      9c36d806f114ad981ed65f3763e04131

    • SHA1

      8b546cede088ececf790ac1cafb02cf5a0366c8e

    • SHA256

      489f3a394942157dbc0ed01c09989288c1a87a2d7b80a6382a4338094b35d710

    • SHA512

      7fb6bb68f45f5fe39ff61c7cd445c71039ddb1260c1a25fe61059ecb03f99f41db2ffd1a273f250168d5c592d2aa6d0fb1bc09a2293057dd5dbbfa6fd4712fe3

    Score
    7/10
    • Deletes itself

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Matrix ATT&CK v6

Defense Evasion

Install Root Certificate

1
T1130

Modify Registry

1
T1112

Credential Access

Credentials in Files

1
T1081

Discovery

Remote System Discovery

1
T1018

Collection

Data from Local System

1
T1005

Tasks