General
-
Target
cf9e87c55b296daee8fc72437eedd0838be65f40fe7ea3acce35fd1b5f03bfcc
-
Size
2.3MB
-
Sample
221124-gll7jsch66
-
MD5
e1c9e1c4036e1c6326a6d91362566b5d
-
SHA1
9ab75374a9ad3f748dc873510b7509b7dba890ca
-
SHA256
cf9e87c55b296daee8fc72437eedd0838be65f40fe7ea3acce35fd1b5f03bfcc
-
SHA512
08715963be3c56ec89b64ff940af879663cfe368e6d1ee0c69a37d0902908076d0bdab781d8f80034dd4d952b65adc795c580ab9bd66147e1a77440863c3fae8
-
SSDEEP
49152:YMicTU88b9c66U4aOpF8bYmK5+Uq2ZJ0G5Ah:vbs9cc4aOvmG+Uqky8
Malware Config
Targets
-
-
Target
cf9e87c55b296daee8fc72437eedd0838be65f40fe7ea3acce35fd1b5f03bfcc
-
Size
2.3MB
-
MD5
e1c9e1c4036e1c6326a6d91362566b5d
-
SHA1
9ab75374a9ad3f748dc873510b7509b7dba890ca
-
SHA256
cf9e87c55b296daee8fc72437eedd0838be65f40fe7ea3acce35fd1b5f03bfcc
-
SHA512
08715963be3c56ec89b64ff940af879663cfe368e6d1ee0c69a37d0902908076d0bdab781d8f80034dd4d952b65adc795c580ab9bd66147e1a77440863c3fae8
-
SSDEEP
49152:YMicTU88b9c66U4aOpF8bYmK5+Uq2ZJ0G5Ah:vbs9cc4aOvmG+Uqky8
Score8/10-
Executes dropped EXE
-
Registers COM server for autorun
-
Loads dropped DLL
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops Chrome extension
-
Installs/modifies Browser Helper Object
BHOs are DLL modules which act as plugins for Internet Explorer.
-
Drops file in System32 directory
-