General

  • Target

    dbc8acc69a74cae76fa559a1a54bf0f1bd5f3d107975a1352cb8e48e8e2b6682

  • Size

    2.1MB

  • Sample

    221125-zj5j8aea68

  • MD5

    153d1142b4b30abf546bc234c80c4b81

  • SHA1

    f5ed39b7a5601a5075d810ebf9b19ce39077d981

  • SHA256

    dbc8acc69a74cae76fa559a1a54bf0f1bd5f3d107975a1352cb8e48e8e2b6682

  • SHA512

    7bda5657bb82b254eea625c97868cb1d83de897c015410d33b70b5da1c9587e4db3e8c493c53b7e83871dbc386ea07df737a4654604055a5d56bad89a92c8f03

  • SSDEEP

    49152:h1Os0IqRs6dLxUsBLmKxbjLHUgp1eR3JuX7:h1ONIwdOsBK2LH/OM

Malware Config

Targets

    • Target

      dbc8acc69a74cae76fa559a1a54bf0f1bd5f3d107975a1352cb8e48e8e2b6682

    • Size

      2.1MB

    • MD5

      153d1142b4b30abf546bc234c80c4b81

    • SHA1

      f5ed39b7a5601a5075d810ebf9b19ce39077d981

    • SHA256

      dbc8acc69a74cae76fa559a1a54bf0f1bd5f3d107975a1352cb8e48e8e2b6682

    • SHA512

      7bda5657bb82b254eea625c97868cb1d83de897c015410d33b70b5da1c9587e4db3e8c493c53b7e83871dbc386ea07df737a4654604055a5d56bad89a92c8f03

    • SSDEEP

      49152:h1Os0IqRs6dLxUsBLmKxbjLHUgp1eR3JuX7:h1ONIwdOsBK2LH/OM

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops Chrome extension

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v6

Tasks