General

  • Target

    c6466a80194ce4abe2b06206c86b66ae40919ec43a8913be27806496a084dbb5

  • Size

    932KB

  • Sample

    221124-x75tsahb91

  • MD5

    4235b89a2be8c3db8e3ff1f1b9b30fd2

  • SHA1

    b9ef559b3f05e21624fa3d560fafd6e9d8726c64

  • SHA256

    c6466a80194ce4abe2b06206c86b66ae40919ec43a8913be27806496a084dbb5

  • SHA512

    6eb5c46fb8b17627e4b650ec19fb55b4f56dc6adb09580fac58ff18fe3fec6b06be16805f19281d090a5cbda2da62a187fd3f7b1417c734e6ef73fe90be103e7

  • SSDEEP

    24576:h1OYdaOWCZ/iWCvu/2sWsJA/jlt+DHhsi:h1Os8CpYO/dJJDHhsi

Malware Config

Targets

    • Target

      c6466a80194ce4abe2b06206c86b66ae40919ec43a8913be27806496a084dbb5

    • Size

      932KB

    • MD5

      4235b89a2be8c3db8e3ff1f1b9b30fd2

    • SHA1

      b9ef559b3f05e21624fa3d560fafd6e9d8726c64

    • SHA256

      c6466a80194ce4abe2b06206c86b66ae40919ec43a8913be27806496a084dbb5

    • SHA512

      6eb5c46fb8b17627e4b650ec19fb55b4f56dc6adb09580fac58ff18fe3fec6b06be16805f19281d090a5cbda2da62a187fd3f7b1417c734e6ef73fe90be103e7

    • SSDEEP

      24576:h1OYdaOWCZ/iWCvu/2sWsJA/jlt+DHhsi:h1Os8CpYO/dJJDHhsi

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v6

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Collection

Data from Local System

1
T1005

Tasks