General
-
Target
048205ff58f5da079e4ac98167d3d3ba8397a9f20ece36086b4f866489bafc8e
-
Size
2.1MB
-
Sample
220527-zn3w7agchq
-
MD5
046b2d42e6b76dde97b91054239d20a0
-
SHA1
cd428923f2ce59a463fb94a737a2f4a8f0b7e793
-
SHA256
048205ff58f5da079e4ac98167d3d3ba8397a9f20ece36086b4f866489bafc8e
-
SHA512
993be80a9d987a7e5f609fe3420ea0afe2b33607d0a64542ddf9e671b4293a499d0fad377b7b192e918cff2bfa9907a1e52ffcc44fbc2284f2bd03e2827ecf90
Malware Config
Targets
-
-
Target
048205ff58f5da079e4ac98167d3d3ba8397a9f20ece36086b4f866489bafc8e
-
Size
2.1MB
-
MD5
046b2d42e6b76dde97b91054239d20a0
-
SHA1
cd428923f2ce59a463fb94a737a2f4a8f0b7e793
-
SHA256
048205ff58f5da079e4ac98167d3d3ba8397a9f20ece36086b4f866489bafc8e
-
SHA512
993be80a9d987a7e5f609fe3420ea0afe2b33607d0a64542ddf9e671b4293a499d0fad377b7b192e918cff2bfa9907a1e52ffcc44fbc2284f2bd03e2827ecf90
Score8/10-
Executes dropped EXE
-
Loads dropped DLL
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops Chrome extension
-
Installs/modifies Browser Helper Object
BHOs are DLL modules which act as plugins for Internet Explorer.
-