General

  • Target

    e12152ebacad38574a9650e443c07f09ed4521051c53fb2c4e069369d781150d

  • Size

    257KB

  • Sample

    221129-m1bbgscb53

  • MD5

    d85bd03419b896af28788309bb688179

  • SHA1

    cd2e794fcbcc9f6d850c2eddff8dbaa9d4978924

  • SHA256

    e12152ebacad38574a9650e443c07f09ed4521051c53fb2c4e069369d781150d

  • SHA512

    8100f92ad41b9aeb96c64276fef096f68d21733012702afc9a5ae7bd128d7555564c66915f25d7f6fa0755be39ca948477efebab1229bd43b33133326e22110b

  • SSDEEP

    6144:91OgDPdkBAFZWjadD4s7Qufb+pqdNdQNsu0Unr:91OgLda6nfb+YdzQf

Malware Config

Targets

    • Target

      e12152ebacad38574a9650e443c07f09ed4521051c53fb2c4e069369d781150d

    • Size

      257KB

    • MD5

      d85bd03419b896af28788309bb688179

    • SHA1

      cd2e794fcbcc9f6d850c2eddff8dbaa9d4978924

    • SHA256

      e12152ebacad38574a9650e443c07f09ed4521051c53fb2c4e069369d781150d

    • SHA512

      8100f92ad41b9aeb96c64276fef096f68d21733012702afc9a5ae7bd128d7555564c66915f25d7f6fa0755be39ca948477efebab1229bd43b33133326e22110b

    • SSDEEP

      6144:91OgDPdkBAFZWjadD4s7Qufb+pqdNdQNsu0Unr:91OgLda6nfb+YdzQf

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v6

Tasks