General

  • Target

    b48f5619abb68ca28dc51d9c95953ddc73334442639278dd468de0ab6dbc6cfd

  • Size

    2.1MB

  • Sample

    221124-nyaslsbf76

  • MD5

    f115a2e0be13aac108f7f2feb350968e

  • SHA1

    b8c3c49f4d65d58e44f7d296ef6b0684967cd22e

  • SHA256

    b48f5619abb68ca28dc51d9c95953ddc73334442639278dd468de0ab6dbc6cfd

  • SHA512

    732571d0b8aa2f644cf9bd4e94a617a8c5625295d3dee1b5caea06a3782b666efb6426ffc1d7e1aabd54ed3a572904ffa94c453ef20aa0351383f115b5b082e6

  • SSDEEP

    24576:h1OYdaOrTwLleYkTVug2PiL0jHM8WK5z6Sh19BUfOD4XRt1otyBNvJvMXzGK5IhU:h1Os6LARTQ9PimJWtShQnvQsruR

Malware Config

Targets

    • Target

      b48f5619abb68ca28dc51d9c95953ddc73334442639278dd468de0ab6dbc6cfd

    • Size

      2.1MB

    • MD5

      f115a2e0be13aac108f7f2feb350968e

    • SHA1

      b8c3c49f4d65d58e44f7d296ef6b0684967cd22e

    • SHA256

      b48f5619abb68ca28dc51d9c95953ddc73334442639278dd468de0ab6dbc6cfd

    • SHA512

      732571d0b8aa2f644cf9bd4e94a617a8c5625295d3dee1b5caea06a3782b666efb6426ffc1d7e1aabd54ed3a572904ffa94c453ef20aa0351383f115b5b082e6

    • SSDEEP

      24576:h1OYdaOrTwLleYkTVug2PiL0jHM8WK5z6Sh19BUfOD4XRt1otyBNvJvMXzGK5IhU:h1Os6LARTQ9PimJWtShQnvQsruR

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v6

Tasks