General

  • Target

    9f2319e90b9171aa75735ddb2ef6c290c0f86062da3240fa126ed06673fb074e

  • Size

    2.1MB

  • Sample

    221123-2w3mhaah88

  • MD5

    84514edc5da04570cc9e1a8e00d5baad

  • SHA1

    a08346c0cec27ea94f847a5f31a77149cefa166f

  • SHA256

    9f2319e90b9171aa75735ddb2ef6c290c0f86062da3240fa126ed06673fb074e

  • SHA512

    cc238f510b14ee387a4923bdd32ce7957013602bd5379890b4fb16b39a52d12cf97ffc883a653d60107a0dc32a5184dbd3c0e59695ba4ed5ca5df2e12b479ba5

  • SSDEEP

    49152:h1OspYIGWkf6jd9YMhKKumq+4oAczj/i6jgvb7GvKSZ:h1Oadd9YMhKgq+4f6

Malware Config

Targets

    • Target

      9f2319e90b9171aa75735ddb2ef6c290c0f86062da3240fa126ed06673fb074e

    • Size

      2.1MB

    • MD5

      84514edc5da04570cc9e1a8e00d5baad

    • SHA1

      a08346c0cec27ea94f847a5f31a77149cefa166f

    • SHA256

      9f2319e90b9171aa75735ddb2ef6c290c0f86062da3240fa126ed06673fb074e

    • SHA512

      cc238f510b14ee387a4923bdd32ce7957013602bd5379890b4fb16b39a52d12cf97ffc883a653d60107a0dc32a5184dbd3c0e59695ba4ed5ca5df2e12b479ba5

    • SSDEEP

      49152:h1OspYIGWkf6jd9YMhKKumq+4oAczj/i6jgvb7GvKSZ:h1Oadd9YMhKgq+4f6

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v6

Tasks