General
-
Target
1c2b678663bc05608aec0b1ac886e6948fc862b4df0d118b7b158c57fe42313e
-
Size
2.1MB
-
Sample
221125-sqa6mafh63
-
MD5
80dc882fe92f44e11e5e13dabc2a356d
-
SHA1
79f39b83fdb782fbae663d79b94feb049b923932
-
SHA256
1c2b678663bc05608aec0b1ac886e6948fc862b4df0d118b7b158c57fe42313e
-
SHA512
f6122477c923f9dd0f2de327d446485bd36080b0d33a65da8644aee337bb4b82b06811777bb3ff78b345baa6f23f511e96d9d292502cbd178567ad7d15e641f1
-
SSDEEP
24576:h1OYdaOoZ4/yZSbsUcMInv5HPeIvYgKLdQ4z7NW6IY12Ck5GfPra5TDVRW:h1OsS+yZS/cMIndPeIvzKL/7NW6L+pRW
Malware Config
Targets
-
-
Target
1c2b678663bc05608aec0b1ac886e6948fc862b4df0d118b7b158c57fe42313e
-
Size
2.1MB
-
MD5
80dc882fe92f44e11e5e13dabc2a356d
-
SHA1
79f39b83fdb782fbae663d79b94feb049b923932
-
SHA256
1c2b678663bc05608aec0b1ac886e6948fc862b4df0d118b7b158c57fe42313e
-
SHA512
f6122477c923f9dd0f2de327d446485bd36080b0d33a65da8644aee337bb4b82b06811777bb3ff78b345baa6f23f511e96d9d292502cbd178567ad7d15e641f1
-
SSDEEP
24576:h1OYdaOoZ4/yZSbsUcMInv5HPeIvYgKLdQ4z7NW6IY12Ck5GfPra5TDVRW:h1OsS+yZS/cMIndPeIvzKL/7NW6L+pRW
Score8/10-
Executes dropped EXE
-
Loads dropped DLL
-
Reads user/profile data of web browsers
Infostealers often target stored browser data, which can include saved credentials etc.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops Chrome extension
-
Installs/modifies Browser Helper Object
BHOs are DLL modules which act as plugins for Internet Explorer.
-