General

  • Target

    9d3bd387bf66d2c1647faf5b77f8efab4099f243ea0544ca4e0447e92676f591

  • Size

    944KB

  • Sample

    221021-ee7hssahe7

  • MD5

    510b9c66e11d1f205203b6bc259856a0

  • SHA1

    2866aa92afe62982e1200a17c25038d847dcf60c

  • SHA256

    9d3bd387bf66d2c1647faf5b77f8efab4099f243ea0544ca4e0447e92676f591

  • SHA512

    e71e8fcf4881b7275ae7a618ad0a4ab00b20bb4413009e4b5b8ef0db23326ca38066bbe4aef194b1b7aa6ae09a1c5cd3cea296f1aa975a2cec0e1c7e01dead68

  • SSDEEP

    12288:7ocG4GfJMRo0dHvZjZLGFSGzBg8EtbQd8QMR20tHWZjZLfgQGzNg8XF6Go:7VG4Gxuo0fZLGFNf7o20kZLfgDkN

Malware Config

Targets

    • Target

      9d3bd387bf66d2c1647faf5b77f8efab4099f243ea0544ca4e0447e92676f591

    • Size

      944KB

    • MD5

      510b9c66e11d1f205203b6bc259856a0

    • SHA1

      2866aa92afe62982e1200a17c25038d847dcf60c

    • SHA256

      9d3bd387bf66d2c1647faf5b77f8efab4099f243ea0544ca4e0447e92676f591

    • SHA512

      e71e8fcf4881b7275ae7a618ad0a4ab00b20bb4413009e4b5b8ef0db23326ca38066bbe4aef194b1b7aa6ae09a1c5cd3cea296f1aa975a2cec0e1c7e01dead68

    • SSDEEP

      12288:7ocG4GfJMRo0dHvZjZLGFSGzBg8EtbQd8QMR20tHWZjZLfgQGzNg8XF6Go:7VG4Gxuo0fZLGFNf7o20kZLfgDkN

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v6

Tasks