General

  • Target

    c0e2c4f529ddbab58c4e1db5ff8a74628fcab31229d08d5ca8431f0daca78e09

  • Size

    920KB

  • Sample

    221124-yhkyraeg46

  • MD5

    6137adb4677ed21492d421fe344df229

  • SHA1

    1ea3edc7307104b3359a24b06ed9b13871445387

  • SHA256

    c0e2c4f529ddbab58c4e1db5ff8a74628fcab31229d08d5ca8431f0daca78e09

  • SHA512

    a82789b12115fa9a8c160655202d011f957e9a815ef1089454c72ef6de9cdd5681f4dc94693ceb4b68100e6e45c5f0df535816675679a12da41d3a4bdc10705a

  • SSDEEP

    24576:h1OYdaOyCZ/iWCvu/2sWsJA/jlt+DHhsZ:h1Os4CpYO/dJJDHhsZ

Malware Config

Targets

    • Target

      c0e2c4f529ddbab58c4e1db5ff8a74628fcab31229d08d5ca8431f0daca78e09

    • Size

      920KB

    • MD5

      6137adb4677ed21492d421fe344df229

    • SHA1

      1ea3edc7307104b3359a24b06ed9b13871445387

    • SHA256

      c0e2c4f529ddbab58c4e1db5ff8a74628fcab31229d08d5ca8431f0daca78e09

    • SHA512

      a82789b12115fa9a8c160655202d011f957e9a815ef1089454c72ef6de9cdd5681f4dc94693ceb4b68100e6e45c5f0df535816675679a12da41d3a4bdc10705a

    • SSDEEP

      24576:h1OYdaOyCZ/iWCvu/2sWsJA/jlt+DHhsZ:h1Os4CpYO/dJJDHhsZ

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

MITRE ATT&CK Matrix ATT&CK v6

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Collection

Data from Local System

1
T1005

Tasks