General
-
Target
45e8e794d22cf25ce18e4edb44db589119f566428d97599894af56cbac552874
-
Size
4.2MB
-
Sample
221125-ck7dwagh31
-
MD5
3eb3d51ff5c0967fa0ddc1b63cd5eca2
-
SHA1
bf8f74e39911668d1881abfcc2bcb7fc1d12838b
-
SHA256
45e8e794d22cf25ce18e4edb44db589119f566428d97599894af56cbac552874
-
SHA512
5509544934407a18adf280f40c551adcf14e4646a140c5b0cdcd2f3669e2fa91115465db31421f256d5836f67b441c72eb4d1e716864055ddad0374de627a783
-
SSDEEP
98304:e5W54dVem9C4ghXSMW//bMW//w9tSN2Ww/WwvR3z:3UxMW//bMW//w9kN2WwWcR3z
Malware Config
Targets
-
-
Target
45e8e794d22cf25ce18e4edb44db589119f566428d97599894af56cbac552874
-
Size
4.2MB
-
MD5
3eb3d51ff5c0967fa0ddc1b63cd5eca2
-
SHA1
bf8f74e39911668d1881abfcc2bcb7fc1d12838b
-
SHA256
45e8e794d22cf25ce18e4edb44db589119f566428d97599894af56cbac552874
-
SHA512
5509544934407a18adf280f40c551adcf14e4646a140c5b0cdcd2f3669e2fa91115465db31421f256d5836f67b441c72eb4d1e716864055ddad0374de627a783
-
SSDEEP
98304:e5W54dVem9C4ghXSMW//bMW//w9tSN2Ww/WwvR3z:3UxMW//bMW//w9kN2WwWcR3z
Score8/10-
Registers COM server for autorun
-
Loads dropped DLL
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops Chrome extension
-
Installs/modifies Browser Helper Object
BHOs are DLL modules which act as plugins for Internet Explorer.
-
Drops file in System32 directory
-