General

  • Target

    c653c6fdec49fb86d90fa0375d614a494703d79fda54021e1c5745b103b7b201

  • Size

    919KB

  • Sample

    221124-x7zyjahb9s

  • MD5

    1f699105392e9cdf2f13a6e42e1c9912

  • SHA1

    04237f25176852fcb3bffa58bb7295daa7699419

  • SHA256

    c653c6fdec49fb86d90fa0375d614a494703d79fda54021e1c5745b103b7b201

  • SHA512

    cd8d00a185548b904ae8e39e6419ee62388170f8e548a67859178c2fa50005aa512d7a1fe4d5708949e36a989bcd8906d034610cc41b77c40145dc75266ed535

  • SSDEEP

    24576:h1OYdaOlCZ/iWCvu/2sWsJA/jlt+DHhsd:h1OsbCpYO/dJJDHhsd

Malware Config

Targets

    • Target

      c653c6fdec49fb86d90fa0375d614a494703d79fda54021e1c5745b103b7b201

    • Size

      919KB

    • MD5

      1f699105392e9cdf2f13a6e42e1c9912

    • SHA1

      04237f25176852fcb3bffa58bb7295daa7699419

    • SHA256

      c653c6fdec49fb86d90fa0375d614a494703d79fda54021e1c5745b103b7b201

    • SHA512

      cd8d00a185548b904ae8e39e6419ee62388170f8e548a67859178c2fa50005aa512d7a1fe4d5708949e36a989bcd8906d034610cc41b77c40145dc75266ed535

    • SSDEEP

      24576:h1OYdaOlCZ/iWCvu/2sWsJA/jlt+DHhsd:h1OsbCpYO/dJJDHhsd

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

MITRE ATT&CK Matrix ATT&CK v6

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Collection

Data from Local System

1
T1005

Tasks