General

  • Target

    d6067708e34f02361a845a48d2d126dff5c20d57b45dc61af3f2402977b224b0

  • Size

    320KB

  • Sample

    221002-lff6kahcd7

  • MD5

    49796b59fddc1e24ef2ef3ac92d0d729

  • SHA1

    cef132730dd774b38b3002b65a9bdea50a761407

  • SHA256

    d6067708e34f02361a845a48d2d126dff5c20d57b45dc61af3f2402977b224b0

  • SHA512

    7805b7241bf811feae0b9448140e6d406e6e3daade9dfe8d74ab300d12976073e7b87baa62b9322f3fe71a7d2a8810f96bc2493819ef2561b4eba8ab3d17df57

  • SSDEEP

    768:gvb1Q7Bbnj9tkT1N+gjqo9+5Y3yna9zOIxpha56xYha5LRxBha5rkAxRha5M2xro:6bGjrs9X3Z98ueDQ

Malware Config

Targets

    • Target

      d6067708e34f02361a845a48d2d126dff5c20d57b45dc61af3f2402977b224b0

    • Size

      320KB

    • MD5

      49796b59fddc1e24ef2ef3ac92d0d729

    • SHA1

      cef132730dd774b38b3002b65a9bdea50a761407

    • SHA256

      d6067708e34f02361a845a48d2d126dff5c20d57b45dc61af3f2402977b224b0

    • SHA512

      7805b7241bf811feae0b9448140e6d406e6e3daade9dfe8d74ab300d12976073e7b87baa62b9322f3fe71a7d2a8810f96bc2493819ef2561b4eba8ab3d17df57

    • SSDEEP

      768:gvb1Q7Bbnj9tkT1N+gjqo9+5Y3yna9zOIxpha56xYha5LRxBha5rkAxRha5M2xro:6bGjrs9X3Z98ueDQ

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses Microsoft Outlook profiles

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks