General

  • Target

    dc6f64aea406d808c2fd61277d0f01479dd5c48cf3e429496b20befaf46e3d9e

  • Size

    313KB

  • Sample

    221014-lap7aahabk

  • MD5

    6b421587e148276e98dfaf55d87bb8e3

  • SHA1

    bc63068be75d6c9d9153f213f3797f7ab24a1b30

  • SHA256

    dc6f64aea406d808c2fd61277d0f01479dd5c48cf3e429496b20befaf46e3d9e

  • SHA512

    6e6b618a29d2a6ce0577296e4bf64624cec017cfcde121d4959d5299003a86852e9a0c31c37f10d263de26be5441bd8bda4e247de1379357fd7676395ad36285

  • SSDEEP

    6144:91OgDPdkBAFZWjadD4sOMfdD2SD9iXbk0WBF/k57MrJgr+qpotyf3:91OgLda0x2S5ubAk57Xlvf3

Malware Config

Targets

    • Target

      dc6f64aea406d808c2fd61277d0f01479dd5c48cf3e429496b20befaf46e3d9e

    • Size

      313KB

    • MD5

      6b421587e148276e98dfaf55d87bb8e3

    • SHA1

      bc63068be75d6c9d9153f213f3797f7ab24a1b30

    • SHA256

      dc6f64aea406d808c2fd61277d0f01479dd5c48cf3e429496b20befaf46e3d9e

    • SHA512

      6e6b618a29d2a6ce0577296e4bf64624cec017cfcde121d4959d5299003a86852e9a0c31c37f10d263de26be5441bd8bda4e247de1379357fd7676395ad36285

    • SSDEEP

      6144:91OgDPdkBAFZWjadD4sOMfdD2SD9iXbk0WBF/k57MrJgr+qpotyf3:91OgLda0x2S5ubAk57Xlvf3

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v6

Tasks