General

  • Target

    5f5fd5a497cd14ac5f8b519816c0a239120d0cc3b338e3ce39c53f0e7d4a4c03

  • Size

    931KB

  • Sample

    221124-jahq4agg68

  • MD5

    187359eb208e008f9c896d87e85b4972

  • SHA1

    a1b1c9751d664cbee01142484b740d2038ebb69e

  • SHA256

    5f5fd5a497cd14ac5f8b519816c0a239120d0cc3b338e3ce39c53f0e7d4a4c03

  • SHA512

    bc3ee363e8efa97c7dc0317a9290b9155525b76389bcdf9d9eaedaf8940f5ff4caca9981e32a52cd8b9e20dfd96887135f831dc076f6034b0d0d8fd61a021d1c

  • SSDEEP

    24576:h1OYdaOaMWSUbvCXEQKSqGv8VWumF6RmcJozyPvpfs:h1OsQMWyUQ+GUVFIcHPvpfs

Malware Config

Targets

    • Target

      5f5fd5a497cd14ac5f8b519816c0a239120d0cc3b338e3ce39c53f0e7d4a4c03

    • Size

      931KB

    • MD5

      187359eb208e008f9c896d87e85b4972

    • SHA1

      a1b1c9751d664cbee01142484b740d2038ebb69e

    • SHA256

      5f5fd5a497cd14ac5f8b519816c0a239120d0cc3b338e3ce39c53f0e7d4a4c03

    • SHA512

      bc3ee363e8efa97c7dc0317a9290b9155525b76389bcdf9d9eaedaf8940f5ff4caca9981e32a52cd8b9e20dfd96887135f831dc076f6034b0d0d8fd61a021d1c

    • SSDEEP

      24576:h1OYdaOaMWSUbvCXEQKSqGv8VWumF6RmcJozyPvpfs:h1OsQMWyUQ+GUVFIcHPvpfs

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks