General
-
Target
301a4059ad6eb8853fdd1c4415f2ee609d7608ffa01b7127adf8e34dc3c98f7e
-
Size
2.7MB
-
Sample
221125-dqdt7agd49
-
MD5
b03274b39b780b2496f147aabf8316bf
-
SHA1
365ee205919823df73382664596a5bb77f04269d
-
SHA256
301a4059ad6eb8853fdd1c4415f2ee609d7608ffa01b7127adf8e34dc3c98f7e
-
SHA512
b79b626e8871cb6f03d896bd09609d4b84e8c1120a40e05b443d15df81d1a7689364f4bb2e60dba091702d893c00caf96be131fdff0386ac2e350cc50a706a7b
-
SSDEEP
49152:cg9XldGKvghxfki1Yc7SK6jSlM/Zf0weeDNxrh:cEWKcj7SK6j8MNtLNx
Malware Config
Targets
-
-
Target
301a4059ad6eb8853fdd1c4415f2ee609d7608ffa01b7127adf8e34dc3c98f7e
-
Size
2.7MB
-
MD5
b03274b39b780b2496f147aabf8316bf
-
SHA1
365ee205919823df73382664596a5bb77f04269d
-
SHA256
301a4059ad6eb8853fdd1c4415f2ee609d7608ffa01b7127adf8e34dc3c98f7e
-
SHA512
b79b626e8871cb6f03d896bd09609d4b84e8c1120a40e05b443d15df81d1a7689364f4bb2e60dba091702d893c00caf96be131fdff0386ac2e350cc50a706a7b
-
SSDEEP
49152:cg9XldGKvghxfki1Yc7SK6jSlM/Zf0weeDNxrh:cEWKcj7SK6j8MNtLNx
Score8/10-
Executes dropped EXE
-
Registers COM server for autorun
-
Loads dropped DLL
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops Chrome extension
-
Installs/modifies Browser Helper Object
BHOs are DLL modules which act as plugins for Internet Explorer.
-
Drops file in System32 directory
-