General

  • Target

    93c38b3e21f2906f94471dec88390f98c5efcd0ae0c74f51492f4c1a6ecfdc4e

  • Size

    168KB

  • Sample

    221123-qxjp8sfa94

  • MD5

    043811bfa25fababa2942ac023594063

  • SHA1

    e43e34a875fc2175db49711b61425a6c8366ea35

  • SHA256

    93c38b3e21f2906f94471dec88390f98c5efcd0ae0c74f51492f4c1a6ecfdc4e

  • SHA512

    6af961eb80db6abf5440507df682332b3fc8b04c7be7cd9e008ed56771395c436186a8f113c631d19a1924c0c810189d60ea1c809cbcf56cfd4d682670b0317f

  • SSDEEP

    3072:9qEd4jClHeneczmVne1dvTCd2R5P7P3YFuGy+M/n/GSm:QEa7zmVnEvTi2nDYFud+M/n/O

Malware Config

Targets

    • Target

      93c38b3e21f2906f94471dec88390f98c5efcd0ae0c74f51492f4c1a6ecfdc4e

    • Size

      168KB

    • MD5

      043811bfa25fababa2942ac023594063

    • SHA1

      e43e34a875fc2175db49711b61425a6c8366ea35

    • SHA256

      93c38b3e21f2906f94471dec88390f98c5efcd0ae0c74f51492f4c1a6ecfdc4e

    • SHA512

      6af961eb80db6abf5440507df682332b3fc8b04c7be7cd9e008ed56771395c436186a8f113c631d19a1924c0c810189d60ea1c809cbcf56cfd4d682670b0317f

    • SSDEEP

      3072:9qEd4jClHeneczmVne1dvTCd2R5P7P3YFuGy+M/n/GSm:QEa7zmVnEvTi2nDYFud+M/n/O

    • Deletes itself

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Matrix ATT&CK v6

Persistence

Hidden Files and Directories

1
T1158

Defense Evasion

Hidden Files and Directories

1
T1158

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

2
T1012

System Information Discovery

1
T1082

Collection

Data from Local System

1
T1005

Tasks