General

  • Target

    e73fcaae5c97182a912dad6b4540810053f5afec86623c7b22a3ec933511fd52

  • Size

    1.9MB

  • Sample

    221123-s2e9qafh4v

  • MD5

    6f53d02565f64b07e20c199ec898028b

  • SHA1

    a5ddd57410306d7acf3117fb684c14f5b12c8d14

  • SHA256

    e73fcaae5c97182a912dad6b4540810053f5afec86623c7b22a3ec933511fd52

  • SHA512

    a7529930d8bfda5f450c0a721e61a4af2c64a4fb0ae02c9d81712c8bdb8bf435623892c7a4efe1c2b41bfcb6f29735ad79e3988934aaf64c74d716cc6e444154

  • SSDEEP

    49152:NHa4eb87fT0efaxJAto9/7miqOwRPaZQs3qQPeGs:5a347fApoo9/7mi+RPa

Malware Config

Targets

    • Target

      e73fcaae5c97182a912dad6b4540810053f5afec86623c7b22a3ec933511fd52

    • Size

      1.9MB

    • MD5

      6f53d02565f64b07e20c199ec898028b

    • SHA1

      a5ddd57410306d7acf3117fb684c14f5b12c8d14

    • SHA256

      e73fcaae5c97182a912dad6b4540810053f5afec86623c7b22a3ec933511fd52

    • SHA512

      a7529930d8bfda5f450c0a721e61a4af2c64a4fb0ae02c9d81712c8bdb8bf435623892c7a4efe1c2b41bfcb6f29735ad79e3988934aaf64c74d716cc6e444154

    • SSDEEP

      49152:NHa4eb87fT0efaxJAto9/7miqOwRPaZQs3qQPeGs:5a347fApoo9/7mi+RPa

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v6

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Collection

Data from Local System

1
T1005

Tasks