General

  • Target

    03ee2541f5c9410ca29e20b70b42a31f2193437b0c7fbdad9cc3415ad7d4b12b

  • Size

    944KB

  • Sample

    220527-2tegwsffg6

  • MD5

    7ebb86585f518e6ffe23eb3e72bef280

  • SHA1

    0d4dee4841ef9fb51c63b220f348adf7a1e4e85d

  • SHA256

    03ee2541f5c9410ca29e20b70b42a31f2193437b0c7fbdad9cc3415ad7d4b12b

  • SHA512

    d760fd7357db4f75b2ff750f00828bce1b37df2812603f936e33aafa299fade20bb3993d12eb274469f0c75d6559abea7b6bdc5672fec4f70c83a293ded64d69

Malware Config

Targets

    • Target

      03ee2541f5c9410ca29e20b70b42a31f2193437b0c7fbdad9cc3415ad7d4b12b

    • Size

      944KB

    • MD5

      7ebb86585f518e6ffe23eb3e72bef280

    • SHA1

      0d4dee4841ef9fb51c63b220f348adf7a1e4e85d

    • SHA256

      03ee2541f5c9410ca29e20b70b42a31f2193437b0c7fbdad9cc3415ad7d4b12b

    • SHA512

      d760fd7357db4f75b2ff750f00828bce1b37df2812603f936e33aafa299fade20bb3993d12eb274469f0c75d6559abea7b6bdc5672fec4f70c83a293ded64d69

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v6

Tasks