General
-
Target
1e17a242b2d6fb233e0d5506949c36ef259a7f77e8f0c4f0d54f65c9e77e47f5
-
Size
4.2MB
-
Sample
221125-j5eypage91
-
MD5
6d08397b606b42940519833b25b38ed1
-
SHA1
3272127cdd5c40289151aeae4d87bde089feebaf
-
SHA256
1e17a242b2d6fb233e0d5506949c36ef259a7f77e8f0c4f0d54f65c9e77e47f5
-
SHA512
0ad523145438e7c107d768276aae7ea7a987d40d1facbd1df724a4f456481ab629c83b6704ef5e732436ab35c368757a5e4f0a7b7023888bdf59852c7fbac70a
-
SSDEEP
98304:7Ioi5tPM4Wh0GWM+AV/cBe/Wo94nirX8i+HrzxVuB7eNktiN+OBvhJOiVk5v0j1f:MoiTPG06Zud6
Malware Config
Targets
-
-
Target
1e17a242b2d6fb233e0d5506949c36ef259a7f77e8f0c4f0d54f65c9e77e47f5
-
Size
4.2MB
-
MD5
6d08397b606b42940519833b25b38ed1
-
SHA1
3272127cdd5c40289151aeae4d87bde089feebaf
-
SHA256
1e17a242b2d6fb233e0d5506949c36ef259a7f77e8f0c4f0d54f65c9e77e47f5
-
SHA512
0ad523145438e7c107d768276aae7ea7a987d40d1facbd1df724a4f456481ab629c83b6704ef5e732436ab35c368757a5e4f0a7b7023888bdf59852c7fbac70a
-
SSDEEP
98304:7Ioi5tPM4Wh0GWM+AV/cBe/Wo94nirX8i+HrzxVuB7eNktiN+OBvhJOiVk5v0j1f:MoiTPG06Zud6
Score8/10-
Registers COM server for autorun
-
Loads dropped DLL
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops Chrome extension
-
Installs/modifies Browser Helper Object
BHOs are DLL modules which act as plugins for Internet Explorer.
-
Drops file in System32 directory
-