General
-
Target
c7eb62e794e34282e1714edf6a0596d00aa964fafd3cdb35d25298b802305a07
-
Size
2.5MB
-
Sample
221124-x42b7adh68
-
MD5
4ed65c7fd25dd6586e53e7a126729385
-
SHA1
d80102b06ef95487dd0fefc43f526a5c1885da31
-
SHA256
c7eb62e794e34282e1714edf6a0596d00aa964fafd3cdb35d25298b802305a07
-
SHA512
3567f98ab12f093ecb97b280d1bd0f442dd3dec09f4d978f52d5e04c0a22777d7e9254684c921c1a44fad7e2e2577f59937ea3a9e3ecdee548cc55c038fe2257
-
SSDEEP
49152:h1Os6CpYO/dJJDHhs6oxRkNfehWfNs4VGufZ9JODSTz4bkl:h1OKly7kNfrNq4l
Malware Config
Targets
-
-
Target
c7eb62e794e34282e1714edf6a0596d00aa964fafd3cdb35d25298b802305a07
-
Size
2.5MB
-
MD5
4ed65c7fd25dd6586e53e7a126729385
-
SHA1
d80102b06ef95487dd0fefc43f526a5c1885da31
-
SHA256
c7eb62e794e34282e1714edf6a0596d00aa964fafd3cdb35d25298b802305a07
-
SHA512
3567f98ab12f093ecb97b280d1bd0f442dd3dec09f4d978f52d5e04c0a22777d7e9254684c921c1a44fad7e2e2577f59937ea3a9e3ecdee548cc55c038fe2257
-
SSDEEP
49152:h1Os6CpYO/dJJDHhs6oxRkNfehWfNs4VGufZ9JODSTz4bkl:h1OKly7kNfrNq4l
Score8/10-
Executes dropped EXE
-
Loads dropped DLL
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops Chrome extension
-
Installs/modifies Browser Helper Object
BHOs are DLL modules which act as plugins for Internet Explorer.
-
Drops file in System32 directory
-