General
-
Target
c7d79521982b64600c3d81eb83c4367b309222487e4397ff1ba3f0afd108a39b
-
Size
2.5MB
-
Sample
221124-x451daha3z
-
MD5
99bc6532485ce06b3327f3b758c79c09
-
SHA1
8b33d311b32a7ef2a1efe74450021df1f6c5704f
-
SHA256
c7d79521982b64600c3d81eb83c4367b309222487e4397ff1ba3f0afd108a39b
-
SHA512
3b2b2088c8562a58f690c6bb759862fe11ab2d045870db1720357cc0ab4c63f969fedc6bbfee0ed3ae7e3bb2666b2689a7aa9581424dcdc2fcc2f244cea016db
-
SSDEEP
49152:h1OsTCpYO/dJJDHhs6oxRkNfehWfNs4VGufZ9JODSTz4bkr:h1Only7kNfrNq4r
Malware Config
Targets
-
-
Target
c7d79521982b64600c3d81eb83c4367b309222487e4397ff1ba3f0afd108a39b
-
Size
2.5MB
-
MD5
99bc6532485ce06b3327f3b758c79c09
-
SHA1
8b33d311b32a7ef2a1efe74450021df1f6c5704f
-
SHA256
c7d79521982b64600c3d81eb83c4367b309222487e4397ff1ba3f0afd108a39b
-
SHA512
3b2b2088c8562a58f690c6bb759862fe11ab2d045870db1720357cc0ab4c63f969fedc6bbfee0ed3ae7e3bb2666b2689a7aa9581424dcdc2fcc2f244cea016db
-
SSDEEP
49152:h1OsTCpYO/dJJDHhs6oxRkNfehWfNs4VGufZ9JODSTz4bkr:h1Only7kNfrNq4r
Score8/10-
Executes dropped EXE
-
Loads dropped DLL
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops Chrome extension
-
Installs/modifies Browser Helper Object
BHOs are DLL modules which act as plugins for Internet Explorer.
-
Drops file in System32 directory
-