General
-
Target
7c2308899547f954c215c109b596c941efb1fc98e7e90503f20e555c41fd733c
-
Size
4.2MB
-
Sample
221124-3b1svaad6t
-
MD5
a9546e050b5421961240771a89005a99
-
SHA1
a283334b550e4601359546634ac16f82d51e03e0
-
SHA256
7c2308899547f954c215c109b596c941efb1fc98e7e90503f20e555c41fd733c
-
SHA512
ed7d7c47333bd083afe12e2db08ab53011d2579365d59bdb9359ca0fd6a01e222233a64f5b20942c83baaeb5a46d4ddd077c3068095abb6208301b43db7ede35
-
SSDEEP
98304:o5W54dVem9C4ghXnOhhMeyxTvUSNYlqDkx:9UNMeyx3NhDkx
Malware Config
Targets
-
-
Target
7c2308899547f954c215c109b596c941efb1fc98e7e90503f20e555c41fd733c
-
Size
4.2MB
-
MD5
a9546e050b5421961240771a89005a99
-
SHA1
a283334b550e4601359546634ac16f82d51e03e0
-
SHA256
7c2308899547f954c215c109b596c941efb1fc98e7e90503f20e555c41fd733c
-
SHA512
ed7d7c47333bd083afe12e2db08ab53011d2579365d59bdb9359ca0fd6a01e222233a64f5b20942c83baaeb5a46d4ddd077c3068095abb6208301b43db7ede35
-
SSDEEP
98304:o5W54dVem9C4ghXnOhhMeyxTvUSNYlqDkx:9UNMeyx3NhDkx
Score8/10-
Registers COM server for autorun
-
Loads dropped DLL
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops Chrome extension
-
Installs/modifies Browser Helper Object
BHOs are DLL modules which act as plugins for Internet Explorer.
-
Drops file in System32 directory
-