General

  • Target

    465c41610fcbd0e281da141826220adb29cf000593ab096865ab4f2169125bdd

  • Size

    931KB

  • Sample

    221125-cj3djadg63

  • MD5

    22fa8547f13d2ceb0902442aeeca015f

  • SHA1

    1e81a3abc801833605fee03f1c119b4c70ee0069

  • SHA256

    465c41610fcbd0e281da141826220adb29cf000593ab096865ab4f2169125bdd

  • SHA512

    582ecf57d232c5c7a0cb808012aa9e852d8b99c457c2dabdce0b6564aa18c0b941e0be8e0519a99c033cb3fd46b273754d9c34a3d2d8db13acd04a2a1745d5e0

  • SSDEEP

    24576:h1OYdaO5CZ/iWCvu/2sWsJA/jlt+DHhsF:h1OsLCpYO/dJJDHhsF

Malware Config

Targets

    • Target

      465c41610fcbd0e281da141826220adb29cf000593ab096865ab4f2169125bdd

    • Size

      931KB

    • MD5

      22fa8547f13d2ceb0902442aeeca015f

    • SHA1

      1e81a3abc801833605fee03f1c119b4c70ee0069

    • SHA256

      465c41610fcbd0e281da141826220adb29cf000593ab096865ab4f2169125bdd

    • SHA512

      582ecf57d232c5c7a0cb808012aa9e852d8b99c457c2dabdce0b6564aa18c0b941e0be8e0519a99c033cb3fd46b273754d9c34a3d2d8db13acd04a2a1745d5e0

    • SSDEEP

      24576:h1OYdaO5CZ/iWCvu/2sWsJA/jlt+DHhsF:h1OsLCpYO/dJJDHhsF

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks