General

  • Target

    7e5b0ca38ad32cf154256e5892771594e589e6f14f53ff8310b545762480c4cd

  • Size

    313KB

  • Sample

    221014-la1b9ahba4

  • MD5

    614a3f60262d2691dd0408c6faeced5c

  • SHA1

    2dda06e21b7bd41fc6b2fa7ded6e82b0cfc18f57

  • SHA256

    7e5b0ca38ad32cf154256e5892771594e589e6f14f53ff8310b545762480c4cd

  • SHA512

    f383704798d9de12d7cb1d269a883f414d235623949b26ae2d301e9c84b35e45fe5373ce5acc8fc9092c29d51561dceee0962e27fe58ce8eea5c2160111ab6b1

  • SSDEEP

    6144:91OgDPdkBAFZWjadD4s5IV6AmxoW+AAduDM2EtcA62Syexa5Vcb+9c:91OgLdao+moW+92dec/a7cj

Malware Config

Targets

    • Target

      7e5b0ca38ad32cf154256e5892771594e589e6f14f53ff8310b545762480c4cd

    • Size

      313KB

    • MD5

      614a3f60262d2691dd0408c6faeced5c

    • SHA1

      2dda06e21b7bd41fc6b2fa7ded6e82b0cfc18f57

    • SHA256

      7e5b0ca38ad32cf154256e5892771594e589e6f14f53ff8310b545762480c4cd

    • SHA512

      f383704798d9de12d7cb1d269a883f414d235623949b26ae2d301e9c84b35e45fe5373ce5acc8fc9092c29d51561dceee0962e27fe58ce8eea5c2160111ab6b1

    • SSDEEP

      6144:91OgDPdkBAFZWjadD4s5IV6AmxoW+AAduDM2EtcA62Syexa5Vcb+9c:91OgLdao+moW+92dec/a7cj

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v6

Tasks