General

  • Target

    4381f206e57b909b1e0e47284bfce0cec1ba0d513bf92d438aea225150598b87

  • Size

    251KB

  • Sample

    221030-t3x2labbfn

  • MD5

    8352fb64c62c98d5c196c8b1f18919dc

  • SHA1

    4beafbdaa2dbc8238784eadfd11a60117fc9e38f

  • SHA256

    4381f206e57b909b1e0e47284bfce0cec1ba0d513bf92d438aea225150598b87

  • SHA512

    46d000b067f0574b3aa0f25c2e9452aad91b21e55769762c64427546f2c079e28d5f6e627a64efdb9aaa460d79dabc9e51c5478555fec0d47d6d57b6e839fd58

  • SSDEEP

    6144:91OgDPdkBAFZWjadD4s/LeKYDKhctX+Hidd7tTFLdRWOiTVT:91OgLdaMLejDKa1+2RFnXi9

Malware Config

Targets

    • Target

      4381f206e57b909b1e0e47284bfce0cec1ba0d513bf92d438aea225150598b87

    • Size

      251KB

    • MD5

      8352fb64c62c98d5c196c8b1f18919dc

    • SHA1

      4beafbdaa2dbc8238784eadfd11a60117fc9e38f

    • SHA256

      4381f206e57b909b1e0e47284bfce0cec1ba0d513bf92d438aea225150598b87

    • SHA512

      46d000b067f0574b3aa0f25c2e9452aad91b21e55769762c64427546f2c079e28d5f6e627a64efdb9aaa460d79dabc9e51c5478555fec0d47d6d57b6e839fd58

    • SSDEEP

      6144:91OgDPdkBAFZWjadD4s/LeKYDKhctX+Hidd7tTFLdRWOiTVT:91OgLdaMLejDKa1+2RFnXi9

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v6

Tasks