General
-
Target
2b8231155415c321f5ab7415da6345043d733e65773d4b3431abb2bd2202e9ac
-
Size
2.9MB
-
Sample
221123-r2743adb9x
-
MD5
673f9ef84d3cb17b001af503f99a0525
-
SHA1
3842a5a3d139fc63c1b0550c6ea0161b2ce9453f
-
SHA256
2b8231155415c321f5ab7415da6345043d733e65773d4b3431abb2bd2202e9ac
-
SHA512
53213c06e3780a37a63cbee7c60af5d55d6559356285c7c006beeb7728d6d5903331a458fe445324a6e90d3ae5b78ce3be097d8e2e96fb1eb4aceb918d33083d
-
SSDEEP
49152:WPVNOS3KcO1qCypOUQnMavAa4yy+1tJhhp1gw7wNx4b8q:WSq9Vqb9ymhpWLNxs
Malware Config
Targets
-
-
Target
2b8231155415c321f5ab7415da6345043d733e65773d4b3431abb2bd2202e9ac
-
Size
2.9MB
-
MD5
673f9ef84d3cb17b001af503f99a0525
-
SHA1
3842a5a3d139fc63c1b0550c6ea0161b2ce9453f
-
SHA256
2b8231155415c321f5ab7415da6345043d733e65773d4b3431abb2bd2202e9ac
-
SHA512
53213c06e3780a37a63cbee7c60af5d55d6559356285c7c006beeb7728d6d5903331a458fe445324a6e90d3ae5b78ce3be097d8e2e96fb1eb4aceb918d33083d
-
SSDEEP
49152:WPVNOS3KcO1qCypOUQnMavAa4yy+1tJhhp1gw7wNx4b8q:WSq9Vqb9ymhpWLNxs
Score8/10-
Registers COM server for autorun
-
Loads dropped DLL
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops Chrome extension
-
Installs/modifies Browser Helper Object
BHOs are DLL modules which act as plugins for Internet Explorer.
-
Drops file in System32 directory
-