General

  • Target

    abaa9b4a4ed0c2ce42eb96df5ba1e599d61c84289262142a24530b345a05d424

  • Size

    245KB

  • Sample

    221107-jftqjsgfhr

  • MD5

    1e986563b9c7ae14c6e827caa31cc367

  • SHA1

    ff7234f6b76883d21609f1cd983940556ba717db

  • SHA256

    abaa9b4a4ed0c2ce42eb96df5ba1e599d61c84289262142a24530b345a05d424

  • SHA512

    bfc04d414e00d14ed69dd2c46dd7bea2a8cefdab3426882d08ed8ceff2157cdd26fe312637c4b50533201e162340a0adf2240c0dcf1cb19d970f8a836c5ba59e

  • SSDEEP

    6144:h1OgDPdkBAFZWjadD4s5qe0sfnLj+Mw0Hh0DUR0J:h1OgLdaOqbsfnGMw0Hho4a

Malware Config

Targets

    • Target

      abaa9b4a4ed0c2ce42eb96df5ba1e599d61c84289262142a24530b345a05d424

    • Size

      245KB

    • MD5

      1e986563b9c7ae14c6e827caa31cc367

    • SHA1

      ff7234f6b76883d21609f1cd983940556ba717db

    • SHA256

      abaa9b4a4ed0c2ce42eb96df5ba1e599d61c84289262142a24530b345a05d424

    • SHA512

      bfc04d414e00d14ed69dd2c46dd7bea2a8cefdab3426882d08ed8ceff2157cdd26fe312637c4b50533201e162340a0adf2240c0dcf1cb19d970f8a836c5ba59e

    • SSDEEP

      6144:h1OgDPdkBAFZWjadD4s5qe0sfnLj+Mw0Hh0DUR0J:h1OgLdaOqbsfnGMw0Hho4a

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v6

Tasks