General

  • Target

    bee433b1a86447ac8277ff5f740b89c7daadda807dbebdfc343ca0d877a0cb53

  • Size

    931KB

  • Sample

    221124-j6mpxsdg9s

  • MD5

    c55252faad3a3830e62bfa787b83d406

  • SHA1

    4f9aa5166a5e29d141043686a3b3c6c4e2ded063

  • SHA256

    bee433b1a86447ac8277ff5f740b89c7daadda807dbebdfc343ca0d877a0cb53

  • SHA512

    e7e73a0ba524e1cde7c23ae557331adeef05d75e82e26b7e90bd72316376476e456cfdbe50cd6963c1bb7b2b164b2cbd4dcdc894df25af44a446cf197b485293

  • SSDEEP

    24576:h1OYdaOGyhyrMWSUbvCXEQKSqGv8VWumF6RmcJozyPvpfM:h1OsMMWyUQ+GUVFIcHPvpfM

Malware Config

Targets

    • Target

      bee433b1a86447ac8277ff5f740b89c7daadda807dbebdfc343ca0d877a0cb53

    • Size

      931KB

    • MD5

      c55252faad3a3830e62bfa787b83d406

    • SHA1

      4f9aa5166a5e29d141043686a3b3c6c4e2ded063

    • SHA256

      bee433b1a86447ac8277ff5f740b89c7daadda807dbebdfc343ca0d877a0cb53

    • SHA512

      e7e73a0ba524e1cde7c23ae557331adeef05d75e82e26b7e90bd72316376476e456cfdbe50cd6963c1bb7b2b164b2cbd4dcdc894df25af44a446cf197b485293

    • SSDEEP

      24576:h1OYdaOGyhyrMWSUbvCXEQKSqGv8VWumF6RmcJozyPvpfM:h1OsMMWyUQ+GUVFIcHPvpfM

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks