Resubmissions

09-06-2022 14:50

220609-r718pshbel 8

09-06-2022 14:38

220609-rzy4dadde2 8

09-06-2022 13:59

220609-raf69sggdk 8

General

  • Target

    Setup_FileViewPro_2022.exe

  • Size

    1.3MB

  • Sample

    220609-raf69sggdk

  • MD5

    5cb079f8ec885592c5538dbe0362d593

  • SHA1

    a5702ea5dfd73c619ad2625e645b93e0a39b1451

  • SHA256

    532a7d66259842f4a710ea7bc6dc48547de371bb69fc842f53934876e787efb8

  • SHA512

    8787a51f3e7eacfd5f507abdfacd58aef34a704d01f84c05ec8074cb77318d3b14223ff2ca3da399633ef82d3529266bcf3bb174bf746450697117915641fb90

Malware Config

Targets

    • Target

      Setup_FileViewPro_2022.exe

    • Size

      1.3MB

    • MD5

      5cb079f8ec885592c5538dbe0362d593

    • SHA1

      a5702ea5dfd73c619ad2625e645b93e0a39b1451

    • SHA256

      532a7d66259842f4a710ea7bc6dc48547de371bb69fc842f53934876e787efb8

    • SHA512

      8787a51f3e7eacfd5f507abdfacd58aef34a704d01f84c05ec8074cb77318d3b14223ff2ca3da399633ef82d3529266bcf3bb174bf746450697117915641fb90

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks