General

  • Target

    b77fef9df041db743028cc694beed91880b0675501daf9f9ce08657c07407035

  • Size

    931KB

  • Sample

    221124-jxchlaac93

  • MD5

    6a4c9322f510f87d6306b4f859926151

  • SHA1

    7dc006e8d15e7e4ad42a90c660f611a69542f72c

  • SHA256

    b77fef9df041db743028cc694beed91880b0675501daf9f9ce08657c07407035

  • SHA512

    6b444ac9754c1a170fc6860f5834574dc91bf2b1be7cc136ae89dc06b398d007a765cfaf168bd2e28d98d4516f320c02cc14d358d9a953f744fd45d5e2e18355

  • SSDEEP

    24576:h1OYdaOUMWSUbvCXEQKSqGv8VWumF6RmcJozyPvpfV:h1OsiMWyUQ+GUVFIcHPvpfV

Malware Config

Targets

    • Target

      b77fef9df041db743028cc694beed91880b0675501daf9f9ce08657c07407035

    • Size

      931KB

    • MD5

      6a4c9322f510f87d6306b4f859926151

    • SHA1

      7dc006e8d15e7e4ad42a90c660f611a69542f72c

    • SHA256

      b77fef9df041db743028cc694beed91880b0675501daf9f9ce08657c07407035

    • SHA512

      6b444ac9754c1a170fc6860f5834574dc91bf2b1be7cc136ae89dc06b398d007a765cfaf168bd2e28d98d4516f320c02cc14d358d9a953f744fd45d5e2e18355

    • SSDEEP

      24576:h1OYdaOUMWSUbvCXEQKSqGv8VWumF6RmcJozyPvpfV:h1OsiMWyUQ+GUVFIcHPvpfV

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks