General

  • Target

    27edd65e642a35b63684a0f889a3ea4656b81de8c713ebdee4d7076dcbbaffdb

  • Size

    2.0MB

  • Sample

    221124-fysz7abd89

  • MD5

    9c8fb19aa34428619b53d7cd535e3f94

  • SHA1

    fcd0538ff313cc1dd79e30e17edebe219f87bf2b

  • SHA256

    27edd65e642a35b63684a0f889a3ea4656b81de8c713ebdee4d7076dcbbaffdb

  • SHA512

    ce9713576e304bd2bf5d64d2df59ace4d93d47d949df87c925e425ff52ad6376e2fc76a9be538f1bf033c2674824dd1743fa10dc710aeb15760a4d718fe9eda5

  • SSDEEP

    24576:h1OYdaOzI6E5REGb4sp9whi3+GVFAc7Ynf+eCI3mF7RGT116QDCp2hD4iFhgFauh:h1OsSb4splF+nf+1bF9BQupbFMQL

Malware Config

Targets

    • Target

      27edd65e642a35b63684a0f889a3ea4656b81de8c713ebdee4d7076dcbbaffdb

    • Size

      2.0MB

    • MD5

      9c8fb19aa34428619b53d7cd535e3f94

    • SHA1

      fcd0538ff313cc1dd79e30e17edebe219f87bf2b

    • SHA256

      27edd65e642a35b63684a0f889a3ea4656b81de8c713ebdee4d7076dcbbaffdb

    • SHA512

      ce9713576e304bd2bf5d64d2df59ace4d93d47d949df87c925e425ff52ad6376e2fc76a9be538f1bf033c2674824dd1743fa10dc710aeb15760a4d718fe9eda5

    • SSDEEP

      24576:h1OYdaOzI6E5REGb4sp9whi3+GVFAc7Ynf+eCI3mF7RGT116QDCp2hD4iFhgFauh:h1OsSb4splF+nf+1bF9BQupbFMQL

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v6

Tasks