General

  • Target

    9a47a9bced29fc5d948e5487ad5485d957d303451b3d145a91554a77cc07b6d7

  • Size

    250KB

  • Sample

    221129-nnvd9sed63

  • MD5

    92d14dab00fac75a6e5f0d0db1026508

  • SHA1

    e55a96d2a46747b57a744c01c9ce85094e9ade1d

  • SHA256

    9a47a9bced29fc5d948e5487ad5485d957d303451b3d145a91554a77cc07b6d7

  • SHA512

    33aefe9a757bd6f6ed8197e27086da62c5e7012673c97860f407ec96af422b386afcc44adfaf83fbf1a469c0c4ea02df3242168fb27e2f269b4c1e6864387aba

  • SSDEEP

    6144:h1OgDPdkBAFZWjadD4s5Mh9YZu1ADmILDV76zckQFEH1:h1OgLdaOMh2Zu1ALV+/QCH1

Malware Config

Targets

    • Target

      9a47a9bced29fc5d948e5487ad5485d957d303451b3d145a91554a77cc07b6d7

    • Size

      250KB

    • MD5

      92d14dab00fac75a6e5f0d0db1026508

    • SHA1

      e55a96d2a46747b57a744c01c9ce85094e9ade1d

    • SHA256

      9a47a9bced29fc5d948e5487ad5485d957d303451b3d145a91554a77cc07b6d7

    • SHA512

      33aefe9a757bd6f6ed8197e27086da62c5e7012673c97860f407ec96af422b386afcc44adfaf83fbf1a469c0c4ea02df3242168fb27e2f269b4c1e6864387aba

    • SSDEEP

      6144:h1OgDPdkBAFZWjadD4s5Mh9YZu1ADmILDV76zckQFEH1:h1OgLdaOMh2Zu1ALV+/QCH1

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v6

Tasks