General

  • Target

    1644731bd088d97fa6ded1b43f75cd93e288cb78ddfbba886e8021dbf1b84f13

  • Size

    3.7MB

  • Sample

    221125-j62h3sgg3s

  • MD5

    1a6b91cbbb9a6534aad5113b4fcf7e17

  • SHA1

    3c7c63eb6aeef5b70887e6a208809c35932f4f25

  • SHA256

    1644731bd088d97fa6ded1b43f75cd93e288cb78ddfbba886e8021dbf1b84f13

  • SHA512

    703def22e9a97e09ad758b34af7b2014cf498b1f5a458804297775946c6d6b71ca65970b1fe82a422ffa6e68f486ccdd0641ebcc116882f1845b2bf446ca71be

  • SSDEEP

    49152:OJgQb1pA0pl0+bLcObuju34fYK/PkoqtIS/0pTb3RtN76B1pKXWLCc:WrTMGof5Rqtl/yPRt0Bi

Malware Config

Targets

    • Target

      1644731bd088d97fa6ded1b43f75cd93e288cb78ddfbba886e8021dbf1b84f13

    • Size

      3.7MB

    • MD5

      1a6b91cbbb9a6534aad5113b4fcf7e17

    • SHA1

      3c7c63eb6aeef5b70887e6a208809c35932f4f25

    • SHA256

      1644731bd088d97fa6ded1b43f75cd93e288cb78ddfbba886e8021dbf1b84f13

    • SHA512

      703def22e9a97e09ad758b34af7b2014cf498b1f5a458804297775946c6d6b71ca65970b1fe82a422ffa6e68f486ccdd0641ebcc116882f1845b2bf446ca71be

    • SSDEEP

      49152:OJgQb1pA0pl0+bLcObuju34fYK/PkoqtIS/0pTb3RtN76B1pKXWLCc:WrTMGof5Rqtl/yPRt0Bi

    • Registers COM server for autorun

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks