General

  • Target

    074d00c26b7a4a9afcea09a61733f412203f8b5b1498995c91c1641d8cbedfa4

  • Size

    2.1MB

  • Sample

    221123-3t1wkage5v

  • MD5

    3895ab595a87f1e2b1a8347ca3a49682

  • SHA1

    d27358df19215eb226a20697fe439742bf0651b4

  • SHA256

    074d00c26b7a4a9afcea09a61733f412203f8b5b1498995c91c1641d8cbedfa4

  • SHA512

    41b7a50e1846c8c094d47d45ce94fc255d72596c60ee6aea2aa19724b0f5447b8a92024b65cc5fdf8d558ce508d3e1784ecc2454a2061de3cc86cd6256cd92fa

  • SSDEEP

    49152:h1OsqhvaZG1MVEtzijkTvu2x/uw4B8FHFF6Z:h1OlvaxMziy3Q

Malware Config

Targets

    • Target

      074d00c26b7a4a9afcea09a61733f412203f8b5b1498995c91c1641d8cbedfa4

    • Size

      2.1MB

    • MD5

      3895ab595a87f1e2b1a8347ca3a49682

    • SHA1

      d27358df19215eb226a20697fe439742bf0651b4

    • SHA256

      074d00c26b7a4a9afcea09a61733f412203f8b5b1498995c91c1641d8cbedfa4

    • SHA512

      41b7a50e1846c8c094d47d45ce94fc255d72596c60ee6aea2aa19724b0f5447b8a92024b65cc5fdf8d558ce508d3e1784ecc2454a2061de3cc86cd6256cd92fa

    • SSDEEP

      49152:h1OsqhvaZG1MVEtzijkTvu2x/uw4B8FHFF6Z:h1OlvaxMziy3Q

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v6

Tasks