General

  • Target

    c94b2615876fad7eb892c7c94a0ef011a61eb47d52954d69ee1093e016c8d4ad

  • Size

    3.5MB

  • Sample

    221123-tdcpcsgg61

  • MD5

    f4e4d7105644c7587ef61508aeaf9a31

  • SHA1

    0b4d2802b130cf1ae5facd7aea6bab001ecb9545

  • SHA256

    c94b2615876fad7eb892c7c94a0ef011a61eb47d52954d69ee1093e016c8d4ad

  • SHA512

    fee0c9f5c0dbbca4be7748e5de9e4eae9646907a022de6d4e22094ff593f91bdbf51353a0304d39a8421c9147e0b63717f8f6db7516006e97788cfdb8752a2e9

  • SSDEEP

    98304:142vCH/c45oOK1IElTrbuXZUM8QCdwR9oGqK4acStjcTDX/qYKLuLsbLYeJUKd1s:1Fv8/fr8ITJ8Ipe

Malware Config

Targets

    • Target

      c94b2615876fad7eb892c7c94a0ef011a61eb47d52954d69ee1093e016c8d4ad

    • Size

      3.5MB

    • MD5

      f4e4d7105644c7587ef61508aeaf9a31

    • SHA1

      0b4d2802b130cf1ae5facd7aea6bab001ecb9545

    • SHA256

      c94b2615876fad7eb892c7c94a0ef011a61eb47d52954d69ee1093e016c8d4ad

    • SHA512

      fee0c9f5c0dbbca4be7748e5de9e4eae9646907a022de6d4e22094ff593f91bdbf51353a0304d39a8421c9147e0b63717f8f6db7516006e97788cfdb8752a2e9

    • SSDEEP

      98304:142vCH/c45oOK1IElTrbuXZUM8QCdwR9oGqK4acStjcTDX/qYKLuLsbLYeJUKd1s:1Fv8/fr8ITJ8Ipe

    • Registers COM server for autorun

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks