General

  • Target

    4ee24fc3649313a8879320e67ce569fcee1ac884c6106758024dab59e10b68eb

  • Size

    2.1MB

  • Sample

    221124-jxpsxsad27

  • MD5

    9c7c07e68afc7aab9b638498508360d1

  • SHA1

    4056034e2340fae9c85b76168cd1218d233f1c69

  • SHA256

    4ee24fc3649313a8879320e67ce569fcee1ac884c6106758024dab59e10b68eb

  • SHA512

    2e5d91fdffb6279979c4a6a20c1138fdaec8cb87db5208791bf747777f42d984ab2d63fc18357a2af2773e5cfc84873d800fe3fcdd0d2e94cafb1a5e254d65ac

  • SSDEEP

    24576:h1OYdaOZTwLleYkTVug2PiL0jHM8WK5z6Sh19BUfOD4XRt1otyBNvJvMXzGK5IhK:h1Os0LARTQ9PimJWtShQnvQsru/

Malware Config

Targets

    • Target

      4ee24fc3649313a8879320e67ce569fcee1ac884c6106758024dab59e10b68eb

    • Size

      2.1MB

    • MD5

      9c7c07e68afc7aab9b638498508360d1

    • SHA1

      4056034e2340fae9c85b76168cd1218d233f1c69

    • SHA256

      4ee24fc3649313a8879320e67ce569fcee1ac884c6106758024dab59e10b68eb

    • SHA512

      2e5d91fdffb6279979c4a6a20c1138fdaec8cb87db5208791bf747777f42d984ab2d63fc18357a2af2773e5cfc84873d800fe3fcdd0d2e94cafb1a5e254d65ac

    • SSDEEP

      24576:h1OYdaOZTwLleYkTVug2PiL0jHM8WK5z6Sh19BUfOD4XRt1otyBNvJvMXzGK5IhK:h1Os0LARTQ9PimJWtShQnvQsru/

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v6

Tasks