General
-
Target
a8391b8274498d7f92cd74d3ee87c3a5fccf557d3d75af78c860961ad8df368f
-
Size
4.3MB
-
Sample
221124-zxzwwshh97
-
MD5
9cf1a56290f23a33e5a3d98b7ccfbb6a
-
SHA1
2e768ddba23c79b8b606731f885c7fe11a18446d
-
SHA256
a8391b8274498d7f92cd74d3ee87c3a5fccf557d3d75af78c860961ad8df368f
-
SHA512
bea0ad885cbecdeeb0ce0f190e55db3ac67a1fa877f25ef1b4e3fc8e8f1638452999372931944a2556ac2e699e8bef779e27bd8c2dcf34e58c7fa76f9bb73143
-
SSDEEP
49152:ZBeGnMbNZ8dtB8+RfUFAE4NQduyi2FnEcXPu84EdDvT0BZQ:AZ8xMMNQduyioEcXb
Malware Config
Targets
-
-
Target
a8391b8274498d7f92cd74d3ee87c3a5fccf557d3d75af78c860961ad8df368f
-
Size
4.3MB
-
MD5
9cf1a56290f23a33e5a3d98b7ccfbb6a
-
SHA1
2e768ddba23c79b8b606731f885c7fe11a18446d
-
SHA256
a8391b8274498d7f92cd74d3ee87c3a5fccf557d3d75af78c860961ad8df368f
-
SHA512
bea0ad885cbecdeeb0ce0f190e55db3ac67a1fa877f25ef1b4e3fc8e8f1638452999372931944a2556ac2e699e8bef779e27bd8c2dcf34e58c7fa76f9bb73143
-
SSDEEP
49152:ZBeGnMbNZ8dtB8+RfUFAE4NQduyi2FnEcXPu84EdDvT0BZQ:AZ8xMMNQduyioEcXb
Score8/10-
Registers COM server for autorun
-
Loads dropped DLL
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops Chrome extension
-
Installs/modifies Browser Helper Object
BHOs are DLL modules which act as plugins for Internet Explorer.
-
Drops file in System32 directory
-