Resubmissions

05-08-2022 09:33

220805-ljglhahgf2 8

03-08-2022 14:10

220803-rg1jgsbhf2 10

General

  • Target

    Report Jul 14 15082.html

  • Size

    1.1MB

  • Sample

    220805-ljglhahgf2

  • MD5

    17478bdc88d5d8101ff1058ab0a44116

  • SHA1

    68021e91cba64f8934552793b5576a5a784c2576

  • SHA256

    7b65db91b674c077640b43395bef733f4e843073fa36be6e153a644aa751c886

  • SHA512

    b4d188fb18594902ae866a29e7eafd8876a2d5a3e7ebec9254467e8fc3c9b7a5010777de13ef06b540874595eca1fd095c8ed3a4f1fa24f6a1b5d5c8241532a2

Malware Config

Targets

    • Target

      Report Jul 14 15082.html

    • Size

      1.1MB

    • MD5

      17478bdc88d5d8101ff1058ab0a44116

    • SHA1

      68021e91cba64f8934552793b5576a5a784c2576

    • SHA256

      7b65db91b674c077640b43395bef733f4e843073fa36be6e153a644aa751c886

    • SHA512

      b4d188fb18594902ae866a29e7eafd8876a2d5a3e7ebec9254467e8fc3c9b7a5010777de13ef06b540874595eca1fd095c8ed3a4f1fa24f6a1b5d5c8241532a2

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Matrix ATT&CK v6

Defense Evasion

Modify Registry

2
T1112

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

2
T1012

System Information Discovery

1
T1082

Collection

Data from Local System

1
T1005

Tasks