General

  • Target

    bc0be75412da9e1d973d7627a1071fbbf84c8fa8a6371c3aa78bd58a852ca74e

  • Size

    718KB

  • Sample

    221030-v1pg4sbge6

  • MD5

    81ce76bb3c9dc71b53646c050cf70ab0

  • SHA1

    1e65a9a988e200db0fc7ba61c48bb178e29f9b21

  • SHA256

    bc0be75412da9e1d973d7627a1071fbbf84c8fa8a6371c3aa78bd58a852ca74e

  • SHA512

    3f0d3943616b396c1ff875f762eba1914b1764838ce86e6343267b2ac8f314975167c96180efce24db7d26dedb89c491448b984c51cac936edd55fdde0268342

  • SSDEEP

    12288:1vuloS7zEAoHLiPcS7N05aaVWeFiIqvogXu3XzJvcaYzwoBRQn:x4oS7oAoHL8cS7O5afCcvBoDTYzN2

Malware Config

Targets

    • Target

      bc0be75412da9e1d973d7627a1071fbbf84c8fa8a6371c3aa78bd58a852ca74e

    • Size

      718KB

    • MD5

      81ce76bb3c9dc71b53646c050cf70ab0

    • SHA1

      1e65a9a988e200db0fc7ba61c48bb178e29f9b21

    • SHA256

      bc0be75412da9e1d973d7627a1071fbbf84c8fa8a6371c3aa78bd58a852ca74e

    • SHA512

      3f0d3943616b396c1ff875f762eba1914b1764838ce86e6343267b2ac8f314975167c96180efce24db7d26dedb89c491448b984c51cac936edd55fdde0268342

    • SSDEEP

      12288:1vuloS7zEAoHLiPcS7N05aaVWeFiIqvogXu3XzJvcaYzwoBRQn:x4oS7oAoHL8cS7O5afCcvBoDTYzN2

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Windows security modification

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks