General

  • Target

    024d8f1ad5dce7c7d6b23adad0a7a69dbb2efb046b1ee9ec0510551557a8f6e6

  • Size

    1000KB

  • Sample

    220528-fznf4aacg4

  • MD5

    425e54bd9569b5083e5db069b895ff43

  • SHA1

    1d95ea09365ef6b4a95bf98e72e051b31f742cbe

  • SHA256

    024d8f1ad5dce7c7d6b23adad0a7a69dbb2efb046b1ee9ec0510551557a8f6e6

  • SHA512

    45acfb6b7b125dbdb5af60c3206630286b726c23beb6d37d4f15612569fbd88243cae6068f9b9956624f0840d586aec53a783d402dcc433810c222c286351c6b

Malware Config

Targets

    • Target

      024d8f1ad5dce7c7d6b23adad0a7a69dbb2efb046b1ee9ec0510551557a8f6e6

    • Size

      1000KB

    • MD5

      425e54bd9569b5083e5db069b895ff43

    • SHA1

      1d95ea09365ef6b4a95bf98e72e051b31f742cbe

    • SHA256

      024d8f1ad5dce7c7d6b23adad0a7a69dbb2efb046b1ee9ec0510551557a8f6e6

    • SHA512

      45acfb6b7b125dbdb5af60c3206630286b726c23beb6d37d4f15612569fbd88243cae6068f9b9956624f0840d586aec53a783d402dcc433810c222c286351c6b

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Matrix ATT&CK v6

Persistence

Browser Extensions

1
T1176

Defense Evasion

Modify Registry

2
T1112

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Collection

Data from Local System

1
T1005

Tasks