General

  • Target

    fc5d67befd9a9e030ae4f9b1cf18a54fd7bfc4ae81aaee5e26468c80d9885050

  • Size

    674KB

  • Sample

    221021-azksbaddd5

  • MD5

    7555cbcbc3710f0a5ae897910c61f2d0

  • SHA1

    4a04d57062786baac7ffbe4493b589aac32ae13b

  • SHA256

    fc5d67befd9a9e030ae4f9b1cf18a54fd7bfc4ae81aaee5e26468c80d9885050

  • SHA512

    feb18c9f727fedbb41c4349ba286513453748348f1b0640c8d7672ef2f095735aacdd29d44331989cdf79c9ca407a143c9099dc4c638727f281178e96b41d10b

  • SSDEEP

    12288:4+ysa1YX7F5XRyNq9xoPS0DR3olNdRxiX46Z02+uWw1BfNB:4x1YX7F5hUq9SRkNdPiIc02QIBfN

Malware Config

Targets

    • Target

      fc5d67befd9a9e030ae4f9b1cf18a54fd7bfc4ae81aaee5e26468c80d9885050

    • Size

      674KB

    • MD5

      7555cbcbc3710f0a5ae897910c61f2d0

    • SHA1

      4a04d57062786baac7ffbe4493b589aac32ae13b

    • SHA256

      fc5d67befd9a9e030ae4f9b1cf18a54fd7bfc4ae81aaee5e26468c80d9885050

    • SHA512

      feb18c9f727fedbb41c4349ba286513453748348f1b0640c8d7672ef2f095735aacdd29d44331989cdf79c9ca407a143c9099dc4c638727f281178e96b41d10b

    • SSDEEP

      12288:4+ysa1YX7F5XRyNq9xoPS0DR3olNdRxiX46Z02+uWw1BfNB:4x1YX7F5hUq9SRkNdPiIc02QIBfN

    • Disables taskbar notifications via registry modification

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Windows security modification

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks