General
-
Target
a0cf3de56e293d431e5befd3b6d9d6dc1ef01132d6d0f1e37f605545b72e0fe8
-
Size
2.3MB
-
Sample
221125-h6tykaeb4y
-
MD5
04582c6a087698c5416ef6100e209363
-
SHA1
1e866ad29d339050bc8e0336f30273c7e2e79d49
-
SHA256
a0cf3de56e293d431e5befd3b6d9d6dc1ef01132d6d0f1e37f605545b72e0fe8
-
SHA512
4b52291b5b02c85205202784f4a5c387bbbe618c4d5996499d01b6d436616c8a507d57ed7643c93e6d016115fe67b03a6239c6bdb0de4bf45c7f95a79cc565b6
-
SSDEEP
49152:MXrvdW2exJESRAyA9dekLuyBjUqxjd6/e0zj9/lh:OW2oZRAyA9ZLuy2kj4m0zj9/
Malware Config
Targets
-
-
Target
a0cf3de56e293d431e5befd3b6d9d6dc1ef01132d6d0f1e37f605545b72e0fe8
-
Size
2.3MB
-
MD5
04582c6a087698c5416ef6100e209363
-
SHA1
1e866ad29d339050bc8e0336f30273c7e2e79d49
-
SHA256
a0cf3de56e293d431e5befd3b6d9d6dc1ef01132d6d0f1e37f605545b72e0fe8
-
SHA512
4b52291b5b02c85205202784f4a5c387bbbe618c4d5996499d01b6d436616c8a507d57ed7643c93e6d016115fe67b03a6239c6bdb0de4bf45c7f95a79cc565b6
-
SSDEEP
49152:MXrvdW2exJESRAyA9dekLuyBjUqxjd6/e0zj9/lh:OW2oZRAyA9ZLuy2kj4m0zj9/
Score8/10-
Executes dropped EXE
-
Registers COM server for autorun
-
Loads dropped DLL
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops Chrome extension
-
Installs/modifies Browser Helper Object
BHOs are DLL modules which act as plugins for Internet Explorer.
-
Drops file in System32 directory
-