General

  • Target

    8bbe92ce6c86844d11a4c37a8bed630ac0e5db486005db7c775ff5a7b1f5a5bd

  • Size

    2.1MB

  • Sample

    221124-h7g1dsbe2y

  • MD5

    769dbb8aec8e6221aef80f9144149f80

  • SHA1

    e528cf237f2fc6f0844f8fa6d224538e5d570221

  • SHA256

    8bbe92ce6c86844d11a4c37a8bed630ac0e5db486005db7c775ff5a7b1f5a5bd

  • SHA512

    93a513db647a17c5e0ff88b07bef645cdf0ec29512f0867d884fa2f14c37c035547b9b36a89d88899b9822ca1c79d31cd1603f706468ad9f82d3bb21d1af97f6

  • SSDEEP

    24576:h1OYdaOkTwLleYkTVug2PiL0jHM8WK5z6Sh19BUfOD4XRt1otyBNvJvMXzGK5Ihg:h1OsrLARTQ9PimJWtShQnvQsruL

Malware Config

Targets

    • Target

      8bbe92ce6c86844d11a4c37a8bed630ac0e5db486005db7c775ff5a7b1f5a5bd

    • Size

      2.1MB

    • MD5

      769dbb8aec8e6221aef80f9144149f80

    • SHA1

      e528cf237f2fc6f0844f8fa6d224538e5d570221

    • SHA256

      8bbe92ce6c86844d11a4c37a8bed630ac0e5db486005db7c775ff5a7b1f5a5bd

    • SHA512

      93a513db647a17c5e0ff88b07bef645cdf0ec29512f0867d884fa2f14c37c035547b9b36a89d88899b9822ca1c79d31cd1603f706468ad9f82d3bb21d1af97f6

    • SSDEEP

      24576:h1OYdaOkTwLleYkTVug2PiL0jHM8WK5z6Sh19BUfOD4XRt1otyBNvJvMXzGK5Ihg:h1OsrLARTQ9PimJWtShQnvQsruL

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v6

Tasks