General

  • Target

    e602e10060cff00c86447403a58939695f12af586e89cc8b18daf36c556dd3d4

  • Size

    779KB

  • Sample

    221125-ycm6xsdf21

  • MD5

    9f49665018215bb52edd1f83d7a3e911

  • SHA1

    30fc77c613dc0154c183c10d6c3a0c3bde5b7c3f

  • SHA256

    e602e10060cff00c86447403a58939695f12af586e89cc8b18daf36c556dd3d4

  • SHA512

    5fae5817f671186ff12f6bf82a88bf1952f271daea64b51800edb33aef3d28b16bb8709689af1976ffbd75d2b51b051860a69ecab9135a118e217b267ea5ff88

  • SSDEEP

    12288:h1OgLdaOo5EaQpHXfierkG+GYdT1xiG4jCLrZJ:h1OYdaOa7QJkxGYNiub

Malware Config

Targets

    • Target

      e602e10060cff00c86447403a58939695f12af586e89cc8b18daf36c556dd3d4

    • Size

      779KB

    • MD5

      9f49665018215bb52edd1f83d7a3e911

    • SHA1

      30fc77c613dc0154c183c10d6c3a0c3bde5b7c3f

    • SHA256

      e602e10060cff00c86447403a58939695f12af586e89cc8b18daf36c556dd3d4

    • SHA512

      5fae5817f671186ff12f6bf82a88bf1952f271daea64b51800edb33aef3d28b16bb8709689af1976ffbd75d2b51b051860a69ecab9135a118e217b267ea5ff88

    • SSDEEP

      12288:h1OgLdaOo5EaQpHXfierkG+GYdT1xiG4jCLrZJ:h1OYdaOa7QJkxGYNiub

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

MITRE ATT&CK Matrix ATT&CK v6

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

Collection

Data from Local System

1
T1005

Tasks