General
-
Target
f24b47f2d2944afc9887b77f952299360b0103a1322bd9fbbaf0333a23689939
-
Size
2.8MB
-
Sample
221123-pyex1ace59
-
MD5
c66aaddb94fa0d82245f6f9c92b77b74
-
SHA1
3bdb2d42ccc3f8109b3b3a826846f1b6267bf25b
-
SHA256
f24b47f2d2944afc9887b77f952299360b0103a1322bd9fbbaf0333a23689939
-
SHA512
1428bbf4aa69d549d7fc5ae5528a8a1fff241fbc757818f6e836186fbacbcab80a8a816ca60f030bab3b61b1efe219341ded0e03ed22a0c3bf3ea1b642095a80
-
SSDEEP
49152:MoEoDl6WI6S0JlT9GLsklF2AWHP62ITSLy7cFKeU64:x0IlT9G/lkFHP6HQjK
Malware Config
Targets
-
-
Target
f24b47f2d2944afc9887b77f952299360b0103a1322bd9fbbaf0333a23689939
-
Size
2.8MB
-
MD5
c66aaddb94fa0d82245f6f9c92b77b74
-
SHA1
3bdb2d42ccc3f8109b3b3a826846f1b6267bf25b
-
SHA256
f24b47f2d2944afc9887b77f952299360b0103a1322bd9fbbaf0333a23689939
-
SHA512
1428bbf4aa69d549d7fc5ae5528a8a1fff241fbc757818f6e836186fbacbcab80a8a816ca60f030bab3b61b1efe219341ded0e03ed22a0c3bf3ea1b642095a80
-
SSDEEP
49152:MoEoDl6WI6S0JlT9GLsklF2AWHP62ITSLy7cFKeU64:x0IlT9G/lkFHP6HQjK
Score8/10-
Registers COM server for autorun
-
Loads dropped DLL
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops Chrome extension
-
Installs/modifies Browser Helper Object
BHOs are DLL modules which act as plugins for Internet Explorer.
-
Drops file in System32 directory
-