General
-
Target
28f96734578f8d4d9daeeff7ca9d730f1a23eccfd731f4b531e412f4249c8042
-
Size
4.2MB
-
Sample
221125-d5cknsce6v
-
MD5
1a7bdd902148d7f5e43eea6fd9bd7524
-
SHA1
6bb711ab516d9e71681c4e2686ff42cbd1de7fe9
-
SHA256
28f96734578f8d4d9daeeff7ca9d730f1a23eccfd731f4b531e412f4249c8042
-
SHA512
9486e8565126425baf4041afa1d70e58f459a3b60ffc57f71cc35ffdad5612edc90224649a530ff241432984f7877dd9f603c08c1ff416c56da27b0557ba4349
-
SSDEEP
49152:e+smhH2wfH/xHjs5FA0wSeenfwZU5BcumXE9Q+G0yt7uwhO8jsnHsiLw8LQ8Zk:e1mJnx0Ze9El2uEO8C/LwrU
Malware Config
Targets
-
-
Target
28f96734578f8d4d9daeeff7ca9d730f1a23eccfd731f4b531e412f4249c8042
-
Size
4.2MB
-
MD5
1a7bdd902148d7f5e43eea6fd9bd7524
-
SHA1
6bb711ab516d9e71681c4e2686ff42cbd1de7fe9
-
SHA256
28f96734578f8d4d9daeeff7ca9d730f1a23eccfd731f4b531e412f4249c8042
-
SHA512
9486e8565126425baf4041afa1d70e58f459a3b60ffc57f71cc35ffdad5612edc90224649a530ff241432984f7877dd9f603c08c1ff416c56da27b0557ba4349
-
SSDEEP
49152:e+smhH2wfH/xHjs5FA0wSeenfwZU5BcumXE9Q+G0yt7uwhO8jsnHsiLw8LQ8Zk:e1mJnx0Ze9El2uEO8C/LwrU
Score8/10-
Registers COM server for autorun
-
Loads dropped DLL
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops Chrome extension
-
Installs/modifies Browser Helper Object
BHOs are DLL modules which act as plugins for Internet Explorer.
-
Drops file in System32 directory
-