General

  • Target

    ce857f00e0dc1e562cfb68888edfb6c47914171e8c9ecdc7391b40b658a5cce4

  • Size

    920KB

  • Sample

    221124-xpybzsda37

  • MD5

    1ae88c945859b0121bf716af62f78c30

  • SHA1

    59b8e07cd988e714b7529828fa45eb11e72d5e6f

  • SHA256

    ce857f00e0dc1e562cfb68888edfb6c47914171e8c9ecdc7391b40b658a5cce4

  • SHA512

    a96f1ec4b5a2d3184f03fcbb79355c177b4650d0303ba481bc966d08523b342cf4abe6040db6e6688b6641e4303f561b0f0ff586c6a48d0bb8826bb246b5de16

  • SSDEEP

    24576:h1OYdaOSCZ/iWCvu/2sWsJA/jlt+DHhs6:h1OsgCpYO/dJJDHhs6

Malware Config

Targets

    • Target

      ce857f00e0dc1e562cfb68888edfb6c47914171e8c9ecdc7391b40b658a5cce4

    • Size

      920KB

    • MD5

      1ae88c945859b0121bf716af62f78c30

    • SHA1

      59b8e07cd988e714b7529828fa45eb11e72d5e6f

    • SHA256

      ce857f00e0dc1e562cfb68888edfb6c47914171e8c9ecdc7391b40b658a5cce4

    • SHA512

      a96f1ec4b5a2d3184f03fcbb79355c177b4650d0303ba481bc966d08523b342cf4abe6040db6e6688b6641e4303f561b0f0ff586c6a48d0bb8826bb246b5de16

    • SSDEEP

      24576:h1OYdaOSCZ/iWCvu/2sWsJA/jlt+DHhs6:h1OsgCpYO/dJJDHhs6

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

MITRE ATT&CK Matrix ATT&CK v6

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Collection

Data from Local System

1
T1005

Tasks