General

  • Target

    4437c6446fc8441204fcc5c3692b5c45499a6ff6558ef38b195c07044cdfb9a4

  • Size

    2.9MB

  • Sample

    221123-vxvvqadb9z

  • MD5

    117ba2f469f0c4feab67d8b2886323bb

  • SHA1

    bad70a8154341282155b1aecdb3d104bcae0d32c

  • SHA256

    4437c6446fc8441204fcc5c3692b5c45499a6ff6558ef38b195c07044cdfb9a4

  • SHA512

    6df3f1560505cd1251db8a95a0e274e5727eb41957bd7fa3ff4d3257e9fd17e2afadc5e93f39f61b73d7e25861fb72a4a1976acd101ffed72ab981a4a7e05e37

  • SSDEEP

    49152:IftpvLKKYt6Vdiipi6+P0bZuKHkL552ypX+rrWuxopkcoCEvf:ALLDxiZP0bkuKGypX+rrP

Malware Config

Targets

    • Target

      4437c6446fc8441204fcc5c3692b5c45499a6ff6558ef38b195c07044cdfb9a4

    • Size

      2.9MB

    • MD5

      117ba2f469f0c4feab67d8b2886323bb

    • SHA1

      bad70a8154341282155b1aecdb3d104bcae0d32c

    • SHA256

      4437c6446fc8441204fcc5c3692b5c45499a6ff6558ef38b195c07044cdfb9a4

    • SHA512

      6df3f1560505cd1251db8a95a0e274e5727eb41957bd7fa3ff4d3257e9fd17e2afadc5e93f39f61b73d7e25861fb72a4a1976acd101ffed72ab981a4a7e05e37

    • SSDEEP

      49152:IftpvLKKYt6Vdiipi6+P0bZuKHkL552ypX+rrWuxopkcoCEvf:ALLDxiZP0bkuKGypX+rrP

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v6

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Collection

Data from Local System

1
T1005

Tasks