General

  • Target

    316bcf487801020bb06d6b614fa6e9d6743594ded6561dfd4f68193cd0c14f82

  • Size

    2.1MB

  • Sample

    221124-fxz24sbd58

  • MD5

    36c068f0a2ff259379a733674ce44d20

  • SHA1

    ee3db6ea394061dcded17b679c412b9d5582a27d

  • SHA256

    316bcf487801020bb06d6b614fa6e9d6743594ded6561dfd4f68193cd0c14f82

  • SHA512

    5c7312b0d6091a887822b36c16997a2d99f5f42eb2bafc9bf65476f1ada885bb8aad40a1fdb5506f79922dd959bb11d8148208bed045ab66de7ed3a88714c57c

  • SSDEEP

    24576:h1OYdaOVGiAEAd/KjjBKyu73i8mxcmMMV6zs+G/pC2d1RJoTJnQqphTuS2MD3Gvw:h1OsKMAd/OxfV6zZGYg1RJQnFrTc2S2

Malware Config

Targets

    • Target

      316bcf487801020bb06d6b614fa6e9d6743594ded6561dfd4f68193cd0c14f82

    • Size

      2.1MB

    • MD5

      36c068f0a2ff259379a733674ce44d20

    • SHA1

      ee3db6ea394061dcded17b679c412b9d5582a27d

    • SHA256

      316bcf487801020bb06d6b614fa6e9d6743594ded6561dfd4f68193cd0c14f82

    • SHA512

      5c7312b0d6091a887822b36c16997a2d99f5f42eb2bafc9bf65476f1ada885bb8aad40a1fdb5506f79922dd959bb11d8148208bed045ab66de7ed3a88714c57c

    • SSDEEP

      24576:h1OYdaOVGiAEAd/KjjBKyu73i8mxcmMMV6zs+G/pC2d1RJoTJnQqphTuS2MD3Gvw:h1OsKMAd/OxfV6zZGYg1RJQnFrTc2S2

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v6

Tasks