General
-
Target
6f5f3586dc9a2588b67d29c0fedc54499272a0d55c7a3c480d91de7e638b401e
-
Size
2.1MB
-
Sample
221124-fq6w3sea6t
-
MD5
1dbc31e157e8a783b78f534785ec0c25
-
SHA1
6aa56c88422b45dbf7b1c11d5b9510bf68f2a202
-
SHA256
6f5f3586dc9a2588b67d29c0fedc54499272a0d55c7a3c480d91de7e638b401e
-
SHA512
b8a58f492e4a86cd3ac7451036bb5a61262e9ef71b6c454296b91da5bee31b1a4d446ce31089db91da9044b19a1bdc419b509164f6c8ce0abcdd0591b5967dc9
-
SSDEEP
24576:h1OYdaOGGiAEAd/KjjBKyu73i8mxcmMMV6zs+G/pC2d1RJoTJnQqphTuS2MD3GvE:h1OsJMAd/OxfV6zZGYg1RJQnFrTc2SW
Malware Config
Targets
-
-
Target
6f5f3586dc9a2588b67d29c0fedc54499272a0d55c7a3c480d91de7e638b401e
-
Size
2.1MB
-
MD5
1dbc31e157e8a783b78f534785ec0c25
-
SHA1
6aa56c88422b45dbf7b1c11d5b9510bf68f2a202
-
SHA256
6f5f3586dc9a2588b67d29c0fedc54499272a0d55c7a3c480d91de7e638b401e
-
SHA512
b8a58f492e4a86cd3ac7451036bb5a61262e9ef71b6c454296b91da5bee31b1a4d446ce31089db91da9044b19a1bdc419b509164f6c8ce0abcdd0591b5967dc9
-
SSDEEP
24576:h1OYdaOGGiAEAd/KjjBKyu73i8mxcmMMV6zs+G/pC2d1RJoTJnQqphTuS2MD3GvE:h1OsJMAd/OxfV6zZGYg1RJQnFrTc2SW
Score8/10-
Executes dropped EXE
-
Loads dropped DLL
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops Chrome extension
-
Installs/modifies Browser Helper Object
BHOs are DLL modules which act as plugins for Internet Explorer.
-
Drops file in System32 directory
-