General

  • Target

    57ae8abc921e9b769119a3c88ae8b7f73a8b6baa5fa62c4e29d9e698755da974

  • Size

    3.4MB

  • Sample

    221123-vpfe3ace6v

  • MD5

    8c64221d6b89e68b8d5d48375563433b

  • SHA1

    b2cc46dc149759878ba186be9a2ed70283537888

  • SHA256

    57ae8abc921e9b769119a3c88ae8b7f73a8b6baa5fa62c4e29d9e698755da974

  • SHA512

    c9e254eb287971812c87474435f3b42d791ef2974c7bbde70eb66ed6706961e9532ae8aa8715b2447126b23adb977998b882c0bfae14960f33fc7b1710026c64

  • SSDEEP

    49152:uefQ1vDuSjEaizTGVmhZ0t1zpLFnXGIBy436BgQhcGUYnUltOsJHUWfnS:ueCvaQiPTgX3336BhcGZGtOsJ

Malware Config

Targets

    • Target

      57ae8abc921e9b769119a3c88ae8b7f73a8b6baa5fa62c4e29d9e698755da974

    • Size

      3.4MB

    • MD5

      8c64221d6b89e68b8d5d48375563433b

    • SHA1

      b2cc46dc149759878ba186be9a2ed70283537888

    • SHA256

      57ae8abc921e9b769119a3c88ae8b7f73a8b6baa5fa62c4e29d9e698755da974

    • SHA512

      c9e254eb287971812c87474435f3b42d791ef2974c7bbde70eb66ed6706961e9532ae8aa8715b2447126b23adb977998b882c0bfae14960f33fc7b1710026c64

    • SSDEEP

      49152:uefQ1vDuSjEaizTGVmhZ0t1zpLFnXGIBy436BgQhcGUYnUltOsJHUWfnS:ueCvaQiPTgX3336BhcGZGtOsJ

    • Registers COM server for autorun

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks