General

  • Target

    5fadb12ff790879d2f963d60b642081e935c0b84b8eb02f0d0a01532abe9972d

  • Size

    2.1MB

  • Sample

    221123-vlk65scc4z

  • MD5

    513d6c24249858b9305d91a30fa4da4c

  • SHA1

    14fa5f5a3ce462f67d0a589f384036647c24e264

  • SHA256

    5fadb12ff790879d2f963d60b642081e935c0b84b8eb02f0d0a01532abe9972d

  • SHA512

    7ef6477d104a3b0081a9c94b2a51ae32d5afd46bde17d1d620b0e938c20d5a8a1367dec38c2e5ec0a12f9c531e36283e0449213db95a4136f3914423c03e19b7

  • SSDEEP

    49152:h1Osx86V+vVy495Sb1F1z7odZ9T+BwSte:h1OQxU81F1zsVce

Malware Config

Targets

    • Target

      5fadb12ff790879d2f963d60b642081e935c0b84b8eb02f0d0a01532abe9972d

    • Size

      2.1MB

    • MD5

      513d6c24249858b9305d91a30fa4da4c

    • SHA1

      14fa5f5a3ce462f67d0a589f384036647c24e264

    • SHA256

      5fadb12ff790879d2f963d60b642081e935c0b84b8eb02f0d0a01532abe9972d

    • SHA512

      7ef6477d104a3b0081a9c94b2a51ae32d5afd46bde17d1d620b0e938c20d5a8a1367dec38c2e5ec0a12f9c531e36283e0449213db95a4136f3914423c03e19b7

    • SSDEEP

      49152:h1Osx86V+vVy495Sb1F1z7odZ9T+BwSte:h1OQxU81F1zsVce

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v6

Tasks