General

  • Target

    fc6437e219ddfc6d138084c2f20cb2b7a16efcf7d0f4e06dae782a170e0baa1e

  • Size

    920KB

  • Sample

    221124-t1lksafd26

  • MD5

    72e2a1875720d7c73e58647700238f00

  • SHA1

    1bf241a9752e506f5df18bc8dbedf7ec72de2525

  • SHA256

    fc6437e219ddfc6d138084c2f20cb2b7a16efcf7d0f4e06dae782a170e0baa1e

  • SHA512

    e426dcff9e63d50378ea8599e894368be46b7a911b97b42ebe2b9dc50a8ede3182e482910f5b36525473499f7a11cb6eba1e07ff4349057512dff1d444cf1b68

  • SSDEEP

    24576:h1OYdaOgCZ/iWCvu/2sWsJA/jlt+DHhs4:h1OsSCpYO/dJJDHhs4

Malware Config

Targets

    • Target

      fc6437e219ddfc6d138084c2f20cb2b7a16efcf7d0f4e06dae782a170e0baa1e

    • Size

      920KB

    • MD5

      72e2a1875720d7c73e58647700238f00

    • SHA1

      1bf241a9752e506f5df18bc8dbedf7ec72de2525

    • SHA256

      fc6437e219ddfc6d138084c2f20cb2b7a16efcf7d0f4e06dae782a170e0baa1e

    • SHA512

      e426dcff9e63d50378ea8599e894368be46b7a911b97b42ebe2b9dc50a8ede3182e482910f5b36525473499f7a11cb6eba1e07ff4349057512dff1d444cf1b68

    • SSDEEP

      24576:h1OYdaOgCZ/iWCvu/2sWsJA/jlt+DHhs4:h1OsSCpYO/dJJDHhs4

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

MITRE ATT&CK Matrix ATT&CK v6

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Collection

Data from Local System

1
T1005

Tasks