General

  • Target

    03d90504ad422956839a4dec61fe4ad4659c1aafbdad2ca7141ff59fd11ac90c

  • Size

    315KB

  • Sample

    221029-l6yhjabgc6

  • MD5

    81a3b13758b665ca91ebd08165d73887

  • SHA1

    5c366ff39f6f320654da3bdfe1d77121ecd73a55

  • SHA256

    03d90504ad422956839a4dec61fe4ad4659c1aafbdad2ca7141ff59fd11ac90c

  • SHA512

    5ac1618019c216be8fd1b86cb0b7e2c6af66ed3b69db5934a7b11c90e95204b67b8bd9f181cd1cf042f92bb718b4194597678056358d43d376c369b5204b11f3

  • SSDEEP

    6144:91OgDPdkBAFZWjadD4smlJECBhT94JCWiU9dBPNaOCXOVO9P6BRilYU:91OgLdaXJEC/oCWlXBPN9AOLkP

Malware Config

Targets

    • Target

      03d90504ad422956839a4dec61fe4ad4659c1aafbdad2ca7141ff59fd11ac90c

    • Size

      315KB

    • MD5

      81a3b13758b665ca91ebd08165d73887

    • SHA1

      5c366ff39f6f320654da3bdfe1d77121ecd73a55

    • SHA256

      03d90504ad422956839a4dec61fe4ad4659c1aafbdad2ca7141ff59fd11ac90c

    • SHA512

      5ac1618019c216be8fd1b86cb0b7e2c6af66ed3b69db5934a7b11c90e95204b67b8bd9f181cd1cf042f92bb718b4194597678056358d43d376c369b5204b11f3

    • SSDEEP

      6144:91OgDPdkBAFZWjadD4smlJECBhT94JCWiU9dBPNaOCXOVO9P6BRilYU:91OgLdaXJEC/oCWlXBPN9AOLkP

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v6

Tasks