General

  • Target

    b6d048bbd972378940bcda6af3d0b3c24a0670a1d4ea9170c3b7adefce9169f3

  • Size

    4.1MB

  • Sample

    221124-psa2vsgg6w

  • MD5

    64999f261cc6a55805ab93157f10c27f

  • SHA1

    344a7998ba357f52078772919457c0f84a4bee4e

  • SHA256

    b6d048bbd972378940bcda6af3d0b3c24a0670a1d4ea9170c3b7adefce9169f3

  • SHA512

    3a61b6982858bad6b5b743e3e0d5da5f86aa9d77dd731f81022a1c4eebd52f6ffb484858226c92b7e113fe3be771d9e027a3edddcffaf578949f1c5724468bd9

  • SSDEEP

    49152:McPmW7JVYzD2ZjQBCA0wEJVnfwZU5BcumN19Q+G0ytquwRlQmEbp7YuwCvM:Msmyc2CMJylPuoDElZws

Malware Config

Targets

    • Target

      b6d048bbd972378940bcda6af3d0b3c24a0670a1d4ea9170c3b7adefce9169f3

    • Size

      4.1MB

    • MD5

      64999f261cc6a55805ab93157f10c27f

    • SHA1

      344a7998ba357f52078772919457c0f84a4bee4e

    • SHA256

      b6d048bbd972378940bcda6af3d0b3c24a0670a1d4ea9170c3b7adefce9169f3

    • SHA512

      3a61b6982858bad6b5b743e3e0d5da5f86aa9d77dd731f81022a1c4eebd52f6ffb484858226c92b7e113fe3be771d9e027a3edddcffaf578949f1c5724468bd9

    • SSDEEP

      49152:McPmW7JVYzD2ZjQBCA0wEJVnfwZU5BcumN19Q+G0ytquwRlQmEbp7YuwCvM:Msmyc2CMJylPuoDElZws

    • Registers COM server for autorun

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v6

Tasks