General

  • Target

    c97b4df865a2608060f233475ba1b27ba3e7bdd3bb8c5da48b1f62e698bd3eae

  • Size

    920KB

  • Sample

    221124-x1n8fsgg5v

  • MD5

    9615c3697d369b4fc83df539a2d944e5

  • SHA1

    1d9c0b14b13320fbf47b5ee2b4e34ab58d9d4db2

  • SHA256

    c97b4df865a2608060f233475ba1b27ba3e7bdd3bb8c5da48b1f62e698bd3eae

  • SHA512

    fcd3c5ea3e166c83425b2e636d79e14243abf7ab8f0dcdbddc35dc393cb7054112aadc9e6a22d89e5b1dc831aac2edcb4601d59141964b2931737827e005f60b

  • SSDEEP

    24576:h1OYdaOYCZ/iWCvu/2sWsJA/jlt+DHhsl:h1OsiCpYO/dJJDHhsl

Malware Config

Targets

    • Target

      c97b4df865a2608060f233475ba1b27ba3e7bdd3bb8c5da48b1f62e698bd3eae

    • Size

      920KB

    • MD5

      9615c3697d369b4fc83df539a2d944e5

    • SHA1

      1d9c0b14b13320fbf47b5ee2b4e34ab58d9d4db2

    • SHA256

      c97b4df865a2608060f233475ba1b27ba3e7bdd3bb8c5da48b1f62e698bd3eae

    • SHA512

      fcd3c5ea3e166c83425b2e636d79e14243abf7ab8f0dcdbddc35dc393cb7054112aadc9e6a22d89e5b1dc831aac2edcb4601d59141964b2931737827e005f60b

    • SSDEEP

      24576:h1OYdaOYCZ/iWCvu/2sWsJA/jlt+DHhsl:h1OsiCpYO/dJJDHhsl

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

MITRE ATT&CK Matrix ATT&CK v6

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Collection

Data from Local System

1
T1005

Tasks