General
-
Target
499134658200da842870f49a2fd70b3bcec9d88b324d035e654ef2093222fb02
-
Size
2.1MB
-
Sample
221125-r9a5aseg87
-
MD5
022354f17ebdce046d26e29498c6444b
-
SHA1
31c80480ad827d1792dabfc437cbd6719d8f3c94
-
SHA256
499134658200da842870f49a2fd70b3bcec9d88b324d035e654ef2093222fb02
-
SHA512
c937f49fa76bad51f47ab7fdc3537285affcdcf2a99ff47cb3b2bba4c1fa4cbcd8932c0e2578cd710e86141e8ea2cfe2f13097ff035c6d414e52bf5ae659c83d
-
SSDEEP
24576:h1OYdaOeZ4/yZSbsUcMInv5HPeIvYgKLdQ4z7NW6IY12Ck5GfPra5TDVRS:h1OsQ+yZS/cMIndPeIvzKL/7NW6L+pRS
Malware Config
Targets
-
-
Target
499134658200da842870f49a2fd70b3bcec9d88b324d035e654ef2093222fb02
-
Size
2.1MB
-
MD5
022354f17ebdce046d26e29498c6444b
-
SHA1
31c80480ad827d1792dabfc437cbd6719d8f3c94
-
SHA256
499134658200da842870f49a2fd70b3bcec9d88b324d035e654ef2093222fb02
-
SHA512
c937f49fa76bad51f47ab7fdc3537285affcdcf2a99ff47cb3b2bba4c1fa4cbcd8932c0e2578cd710e86141e8ea2cfe2f13097ff035c6d414e52bf5ae659c83d
-
SSDEEP
24576:h1OYdaOeZ4/yZSbsUcMInv5HPeIvYgKLdQ4z7NW6IY12Ck5GfPra5TDVRS:h1OsQ+yZS/cMIndPeIvzKL/7NW6L+pRS
Score8/10-
Executes dropped EXE
-
Loads dropped DLL
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops Chrome extension
-
Installs/modifies Browser Helper Object
BHOs are DLL modules which act as plugins for Internet Explorer.
-