General

  • Target

    c45c0fe5319bddca5f59b397a618feb1dedad21d6199c0e915e7ec5f44001722

  • Size

    2.0MB

  • Sample

    221124-fhkzmsad25

  • MD5

    0cc14b85b435295e5a78afbf906114ac

  • SHA1

    09a591e0c2936744381464181ce18d0b48f442a8

  • SHA256

    c45c0fe5319bddca5f59b397a618feb1dedad21d6199c0e915e7ec5f44001722

  • SHA512

    70b3c479bd01972d592005b0666684695bc395973cea737a4e8b8ae98a98cdd6b46e967b00a3d780ef69517e248a79c56a5c02733232f2eac93f4b0b247aa945

  • SSDEEP

    24576:h1OYdaO/aacvu7gXAfwlUlZov8Hk7IelYNJbMBhTlmWCv9oU+pHi00CScsPzMZp1:h1Os0qZBJgvzCg50qNLaW

Malware Config

Targets

    • Target

      c45c0fe5319bddca5f59b397a618feb1dedad21d6199c0e915e7ec5f44001722

    • Size

      2.0MB

    • MD5

      0cc14b85b435295e5a78afbf906114ac

    • SHA1

      09a591e0c2936744381464181ce18d0b48f442a8

    • SHA256

      c45c0fe5319bddca5f59b397a618feb1dedad21d6199c0e915e7ec5f44001722

    • SHA512

      70b3c479bd01972d592005b0666684695bc395973cea737a4e8b8ae98a98cdd6b46e967b00a3d780ef69517e248a79c56a5c02733232f2eac93f4b0b247aa945

    • SSDEEP

      24576:h1OYdaO/aacvu7gXAfwlUlZov8Hk7IelYNJbMBhTlmWCv9oU+pHi00CScsPzMZp1:h1Os0qZBJgvzCg50qNLaW

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v6

Tasks