General
-
Target
2328d4d765d5bfd2e2464cbb1e71eac8c111a51755fa78e36f53579a38607f86
-
Size
4.2MB
-
Sample
221125-ee2bsadc5s
-
MD5
725b9b2995a30fbf9f197d7ce2e62245
-
SHA1
d0e2f9eeaffaef48d5920659db3c6a5f57d7de57
-
SHA256
2328d4d765d5bfd2e2464cbb1e71eac8c111a51755fa78e36f53579a38607f86
-
SHA512
dcdb78e04f89d4890cd2cd9adff95f3b05c0f072928bcd75ac63f5282df8e837b066372d7ae96483a1b44461be90da850c8a84bc27da682028d8da2ffb497923
-
SSDEEP
98304:aPHy4dVem3IU8PXn7bdlqTvUSN+WtuvxFsPEtR:Inr3NrtuJXt
Malware Config
Targets
-
-
Target
2328d4d765d5bfd2e2464cbb1e71eac8c111a51755fa78e36f53579a38607f86
-
Size
4.2MB
-
MD5
725b9b2995a30fbf9f197d7ce2e62245
-
SHA1
d0e2f9eeaffaef48d5920659db3c6a5f57d7de57
-
SHA256
2328d4d765d5bfd2e2464cbb1e71eac8c111a51755fa78e36f53579a38607f86
-
SHA512
dcdb78e04f89d4890cd2cd9adff95f3b05c0f072928bcd75ac63f5282df8e837b066372d7ae96483a1b44461be90da850c8a84bc27da682028d8da2ffb497923
-
SSDEEP
98304:aPHy4dVem3IU8PXn7bdlqTvUSN+WtuvxFsPEtR:Inr3NrtuJXt
Score8/10-
Registers COM server for autorun
-
Loads dropped DLL
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops Chrome extension
-
Installs/modifies Browser Helper Object
BHOs are DLL modules which act as plugins for Internet Explorer.
-
Drops file in System32 directory
-