General

  • Target

    080aefae78989bf3dbb81f517a7a89bd34fa2939ef25b681016163f558191d7f

  • Size

    2.1MB

  • Sample

    221123-3tvdsage4t

  • MD5

    8f288c2a67aadc8541d1caeea27dc081

  • SHA1

    e0099e6ec0d7040cd805868a6d18c4097701bc66

  • SHA256

    080aefae78989bf3dbb81f517a7a89bd34fa2939ef25b681016163f558191d7f

  • SHA512

    7145d20ebef0b3058f2fb6bd85f3b1901ccd24ebe54f73977b844bbaed0b0367155c8defa52419f2974c430874253ae10c28eb7b69b16e1aecd765181224cf8c

  • SSDEEP

    49152:h1OsyYIGWkf6jd9YMhKKumq+4oAczj/i6jgvb7GvKSn:h1OVdd9YMhKgq+4fU

Malware Config

Targets

    • Target

      080aefae78989bf3dbb81f517a7a89bd34fa2939ef25b681016163f558191d7f

    • Size

      2.1MB

    • MD5

      8f288c2a67aadc8541d1caeea27dc081

    • SHA1

      e0099e6ec0d7040cd805868a6d18c4097701bc66

    • SHA256

      080aefae78989bf3dbb81f517a7a89bd34fa2939ef25b681016163f558191d7f

    • SHA512

      7145d20ebef0b3058f2fb6bd85f3b1901ccd24ebe54f73977b844bbaed0b0367155c8defa52419f2974c430874253ae10c28eb7b69b16e1aecd765181224cf8c

    • SSDEEP

      49152:h1OsyYIGWkf6jd9YMhKKumq+4oAczj/i6jgvb7GvKSn:h1OVdd9YMhKgq+4fU

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v6

Tasks