General

  • Target

    f9d56a7a75cceb9d96f769486c02c8c8f170678c9b486459c5a6a949bb628e19

  • Size

    919KB

  • Sample

    221124-t6d3wsah7z

  • MD5

    328e7cce9131d4b66c4791ed887722de

  • SHA1

    0a098daacd05e5e2cbd1e76b3bef6ebf83d66e57

  • SHA256

    f9d56a7a75cceb9d96f769486c02c8c8f170678c9b486459c5a6a949bb628e19

  • SHA512

    e1b1dca611d47b22a76b4e0a7bde7a4b1c16f19e8b5f1d516f776870dbc9f02c662648d430659e326bedc6f8e61bbf58a4c414302d944d1e20210c16cf500c9a

  • SSDEEP

    24576:h1OYdaO1CZ/iWCvu/2sWsJA/jlt+DHhsK:h1OsXCpYO/dJJDHhsK

Malware Config

Targets

    • Target

      f9d56a7a75cceb9d96f769486c02c8c8f170678c9b486459c5a6a949bb628e19

    • Size

      919KB

    • MD5

      328e7cce9131d4b66c4791ed887722de

    • SHA1

      0a098daacd05e5e2cbd1e76b3bef6ebf83d66e57

    • SHA256

      f9d56a7a75cceb9d96f769486c02c8c8f170678c9b486459c5a6a949bb628e19

    • SHA512

      e1b1dca611d47b22a76b4e0a7bde7a4b1c16f19e8b5f1d516f776870dbc9f02c662648d430659e326bedc6f8e61bbf58a4c414302d944d1e20210c16cf500c9a

    • SSDEEP

      24576:h1OYdaO1CZ/iWCvu/2sWsJA/jlt+DHhsK:h1OsXCpYO/dJJDHhsK

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

MITRE ATT&CK Matrix ATT&CK v6

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Collection

Data from Local System

1
T1005

Tasks