Resubmissions

02/11/2022, 20:06

221102-yvc4nseabr 9

02/11/2022, 19:23

221102-x3yjxadgbl 8

General

  • Target

    IObit Driver Booster Pro 9.2.0.173 Multilingual.zip

  • Size

    31.2MB

  • Sample

    221102-x3yjxadgbl

  • MD5

    23065825b6884c76e36056a6cbd4d987

  • SHA1

    4070a7e5ace6de9fc6ee8b56f859493aeea4f873

  • SHA256

    567f903bfa1f6a7d84daee019e4aa5524567cf35ced3f5d70601870fc8589818

  • SHA512

    1fc1c0c42f847e242da31e9e5f8340383e1df2f624560fbe762e39347538439348e579ae7af5c0457612c2953bea01f9f5129cfbc15b7ed7953c6ae1d2558808

  • SSDEEP

    786432:W2YrbWmslCAqhgrhXqWEF2Z4LsPXWwkR1qsmP1mrY2FP:WJbOtrZqZv45kTgP1mrY2l

Malware Config

Targets

    • Target

      IObit Driver Booster Pro 9.2.0.173 Multilingual.zip

    • Size

      31.2MB

    • MD5

      23065825b6884c76e36056a6cbd4d987

    • SHA1

      4070a7e5ace6de9fc6ee8b56f859493aeea4f873

    • SHA256

      567f903bfa1f6a7d84daee019e4aa5524567cf35ced3f5d70601870fc8589818

    • SHA512

      1fc1c0c42f847e242da31e9e5f8340383e1df2f624560fbe762e39347538439348e579ae7af5c0457612c2953bea01f9f5129cfbc15b7ed7953c6ae1d2558808

    • SSDEEP

      786432:W2YrbWmslCAqhgrhXqWEF2Z4LsPXWwkR1qsmP1mrY2FP:WJbOtrZqZv45kTgP1mrY2l

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks for any installed AV software in registry

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v6

Tasks