General

  • Target

    6301c159da07b0919b7e78362199e4fc5ed1496f134a63047af415cfc1e640e2

  • Size

    2.0MB

  • Sample

    221123-vkd2fahc34

  • MD5

    21b5b459a81455f789376e6e0709df5b

  • SHA1

    15b235b794c2db0cdc0bd1572575cb4b743f5063

  • SHA256

    6301c159da07b0919b7e78362199e4fc5ed1496f134a63047af415cfc1e640e2

  • SHA512

    47aec573973c5312dae0bde990a3de49320ed8593629bdc175318d93808c915c04b29f65188d531e66af60e05a1787805f14387a60fd0e7223e4c7b43a475357

  • SSDEEP

    49152:cWa4Vbl7fscefaxJAto9/N48uouDUQhDi3eQjeGs:1akR7f7poo9/iamUQ

Malware Config

Targets

    • Target

      6301c159da07b0919b7e78362199e4fc5ed1496f134a63047af415cfc1e640e2

    • Size

      2.0MB

    • MD5

      21b5b459a81455f789376e6e0709df5b

    • SHA1

      15b235b794c2db0cdc0bd1572575cb4b743f5063

    • SHA256

      6301c159da07b0919b7e78362199e4fc5ed1496f134a63047af415cfc1e640e2

    • SHA512

      47aec573973c5312dae0bde990a3de49320ed8593629bdc175318d93808c915c04b29f65188d531e66af60e05a1787805f14387a60fd0e7223e4c7b43a475357

    • SSDEEP

      49152:cWa4Vbl7fscefaxJAto9/N48uouDUQhDi3eQjeGs:1akR7f7poo9/iamUQ

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v6

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Collection

Data from Local System

1
T1005

Tasks