General
-
Target
6594892344c44af5ba397e1aed54b2233bfefdfe917a269ebf1012f61f4eed9c
-
Size
3.3MB
-
Sample
221125-pmzs2agd39
-
MD5
3b0e4ef469b3cf2a95bd8795ead06954
-
SHA1
2bc59353140f1260303115fec745b6351bbebca2
-
SHA256
6594892344c44af5ba397e1aed54b2233bfefdfe917a269ebf1012f61f4eed9c
-
SHA512
adc01f26242d76f27fa5b18cf55046d2e890c00f57d7a2093363d08ae596f31b2b1bdb2770761d9f0430d31d852cb63d80f562ae699751e26ac96843d0136452
-
SSDEEP
49152:lr0DhoPJuC71KunZ9+xmrC+EDrpY2sCCP0/1R9ql6zPwoF:u9bC71h74aC+ExY2sTSk
Malware Config
Targets
-
-
Target
6594892344c44af5ba397e1aed54b2233bfefdfe917a269ebf1012f61f4eed9c
-
Size
3.3MB
-
MD5
3b0e4ef469b3cf2a95bd8795ead06954
-
SHA1
2bc59353140f1260303115fec745b6351bbebca2
-
SHA256
6594892344c44af5ba397e1aed54b2233bfefdfe917a269ebf1012f61f4eed9c
-
SHA512
adc01f26242d76f27fa5b18cf55046d2e890c00f57d7a2093363d08ae596f31b2b1bdb2770761d9f0430d31d852cb63d80f562ae699751e26ac96843d0136452
-
SSDEEP
49152:lr0DhoPJuC71KunZ9+xmrC+EDrpY2sCCP0/1R9ql6zPwoF:u9bC71h74aC+ExY2sTSk
Score8/10-
Registers COM server for autorun
-
Loads dropped DLL
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops Chrome extension
-
Installs/modifies Browser Helper Object
BHOs are DLL modules which act as plugins for Internet Explorer.
-
Drops file in System32 directory
-