General

  • Target

    53de07afdcffcc8da21378dcf6160e377058b2ed801adcf6e468245f7319c0d0

  • Size

    2.1MB

  • Sample

    221124-jx1v7adc61

  • MD5

    9d90e2187eedc21ee8413c0a2543f664

  • SHA1

    0bc41478c636703c78607b777f2d124069ae4baa

  • SHA256

    53de07afdcffcc8da21378dcf6160e377058b2ed801adcf6e468245f7319c0d0

  • SHA512

    2e084cc29a0d89c1ab98bd533e16e63e9598377968f63a6a5f3bc6d6208acac4ebdfa5c4d8f3422e65d1f5d2353e889d1f74dd60805cb1c334cada92db372565

  • SSDEEP

    49152:h1Os8l9RJLu6vcW6hGkaVR7QSiN/tObJmZcqYUuRTN:h1O7rVOhGRkSixtKDT

Malware Config

Targets

    • Target

      53de07afdcffcc8da21378dcf6160e377058b2ed801adcf6e468245f7319c0d0

    • Size

      2.1MB

    • MD5

      9d90e2187eedc21ee8413c0a2543f664

    • SHA1

      0bc41478c636703c78607b777f2d124069ae4baa

    • SHA256

      53de07afdcffcc8da21378dcf6160e377058b2ed801adcf6e468245f7319c0d0

    • SHA512

      2e084cc29a0d89c1ab98bd533e16e63e9598377968f63a6a5f3bc6d6208acac4ebdfa5c4d8f3422e65d1f5d2353e889d1f74dd60805cb1c334cada92db372565

    • SSDEEP

      49152:h1Os8l9RJLu6vcW6hGkaVR7QSiN/tObJmZcqYUuRTN:h1O7rVOhGRkSixtKDT

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v6

Tasks