General

  • Target

    7da1457c62510994d24de372cc30c2aea31aa1a0090172fb9ebb580da68dc05f

  • Size

    313KB

  • Sample

    221020-aarjkaeagq

  • MD5

    a20f425d407fb446e38c11a84123c4ba

  • SHA1

    2ead87cc96dd074fe6fe667553dc18e68da25579

  • SHA256

    7da1457c62510994d24de372cc30c2aea31aa1a0090172fb9ebb580da68dc05f

  • SHA512

    81a8cb6423d9d50ff967bfaa8e3d20cc8731ea7df7fef4b4f87ab52b16f66f314bf65cea302116727baa6fe103a6766c245bef42b9cd7d2b6abb760a41e9e094

  • SSDEEP

    6144:91OgDPdkBAFZWjadD4sEVh26YCLB8g/wl2RZ8jYwgSGJDeFyRth:91OgLda1VI6Og/wl2Dq5Bath

Malware Config

Targets

    • Target

      7da1457c62510994d24de372cc30c2aea31aa1a0090172fb9ebb580da68dc05f

    • Size

      313KB

    • MD5

      a20f425d407fb446e38c11a84123c4ba

    • SHA1

      2ead87cc96dd074fe6fe667553dc18e68da25579

    • SHA256

      7da1457c62510994d24de372cc30c2aea31aa1a0090172fb9ebb580da68dc05f

    • SHA512

      81a8cb6423d9d50ff967bfaa8e3d20cc8731ea7df7fef4b4f87ab52b16f66f314bf65cea302116727baa6fe103a6766c245bef42b9cd7d2b6abb760a41e9e094

    • SSDEEP

      6144:91OgDPdkBAFZWjadD4sEVh26YCLB8g/wl2RZ8jYwgSGJDeFyRth:91OgLda1VI6Og/wl2Dq5Bath

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v6

Tasks