Resubmissions

15/09/2022, 18:46

220915-xe42sahefm 8

15/09/2022, 18:25

220915-w2mwcadgf3 8

15/09/2022, 17:51

220915-wfjxkahdgq 8

General

  • Target

    https://cracked.to/Thread-%E2%9D%A4%EF%B8%8FHUGE-DB-W-TEEN-NUDES-%E2%9D%A4%EF%B8%8F-Private-%E2%9C%A8-VERIFICATION-PICS-%E2%9C%A8-UHQ-E-Whoring-NO-WATERMARK-%E2%9C%A8?pid=22682475#pid22682475

  • Sample

    220915-xe42sahefm

Malware Config

Targets

    • Target

      https://cracked.to/Thread-%E2%9D%A4%EF%B8%8FHUGE-DB-W-TEEN-NUDES-%E2%9D%A4%EF%B8%8F-Private-%E2%9C%A8-VERIFICATION-PICS-%E2%9C%A8-UHQ-E-Whoring-NO-WATERMARK-%E2%9C%A8?pid=22682475#pid22682475

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks