General
-
Target
99007654cd0918ec73a9f55ce20c278677d6c654d43b268c505f1b2eff0904b2
-
Size
4.2MB
-
Sample
221124-1qxnmabg25
-
MD5
74ea83c3a3d36f5efd1fc36d78247558
-
SHA1
7211f97b8ab6b0f209a92fa569a28bb848900b54
-
SHA256
99007654cd0918ec73a9f55ce20c278677d6c654d43b268c505f1b2eff0904b2
-
SHA512
aaddb2ec05fa0689a81612eb8a1d907de13f80d167bd1010f845861ba0498eab6f43e0cb53cb2298e8c03f69137f3af1accef53c8665c3ef5fcadefe7f0eea61
-
SSDEEP
98304:CaJQkdVemaiVo4XYOhhMeybCysmlqDkx:vVTMeywDkx
Malware Config
Targets
-
-
Target
99007654cd0918ec73a9f55ce20c278677d6c654d43b268c505f1b2eff0904b2
-
Size
4.2MB
-
MD5
74ea83c3a3d36f5efd1fc36d78247558
-
SHA1
7211f97b8ab6b0f209a92fa569a28bb848900b54
-
SHA256
99007654cd0918ec73a9f55ce20c278677d6c654d43b268c505f1b2eff0904b2
-
SHA512
aaddb2ec05fa0689a81612eb8a1d907de13f80d167bd1010f845861ba0498eab6f43e0cb53cb2298e8c03f69137f3af1accef53c8665c3ef5fcadefe7f0eea61
-
SSDEEP
98304:CaJQkdVemaiVo4XYOhhMeybCysmlqDkx:vVTMeywDkx
Score8/10-
Registers COM server for autorun
-
Loads dropped DLL
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops Chrome extension
-
Installs/modifies Browser Helper Object
BHOs are DLL modules which act as plugins for Internet Explorer.
-
Drops file in System32 directory
-