General

  • Target

    fab0edaac2ae4004274c6c8b840974a34dfffc80b0ef5c8fdf2b4419d66d39d6

  • Size

    920KB

  • Sample

    221124-t4wvxsag9t

  • MD5

    59ba24ead4e0c7f47c2a2efda2cabd3b

  • SHA1

    097c98a4e7254e0532ae29650508427def35f29b

  • SHA256

    fab0edaac2ae4004274c6c8b840974a34dfffc80b0ef5c8fdf2b4419d66d39d6

  • SHA512

    3fad793580ef05b10af48382fab911aa6685fe65016ccf7f85ec27b9af4808bb2d9d8e9027d38ad08ea39759fac922c77760c9941006e1f9024ea49058c821d3

  • SSDEEP

    24576:h1OYdaOmCZ/iWCvu/2sWsJA/jlt+DHhsu:h1OsYCpYO/dJJDHhsu

Malware Config

Targets

    • Target

      fab0edaac2ae4004274c6c8b840974a34dfffc80b0ef5c8fdf2b4419d66d39d6

    • Size

      920KB

    • MD5

      59ba24ead4e0c7f47c2a2efda2cabd3b

    • SHA1

      097c98a4e7254e0532ae29650508427def35f29b

    • SHA256

      fab0edaac2ae4004274c6c8b840974a34dfffc80b0ef5c8fdf2b4419d66d39d6

    • SHA512

      3fad793580ef05b10af48382fab911aa6685fe65016ccf7f85ec27b9af4808bb2d9d8e9027d38ad08ea39759fac922c77760c9941006e1f9024ea49058c821d3

    • SSDEEP

      24576:h1OYdaOmCZ/iWCvu/2sWsJA/jlt+DHhsu:h1OsYCpYO/dJJDHhsu

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

MITRE ATT&CK Matrix ATT&CK v6

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Collection

Data from Local System

1
T1005

Tasks