General

  • Target

    e7535a14ed9e82119d78d222f5ceff79ec6529671dfcfc837aa673aab5b542ef

  • Size

    250KB

  • Sample

    221201-h16p6seg72

  • MD5

    bb05e733e82a8d997e8304fc4f432767

  • SHA1

    cd93cf122a487163c69f0159176ef63a154ae274

  • SHA256

    e7535a14ed9e82119d78d222f5ceff79ec6529671dfcfc837aa673aab5b542ef

  • SHA512

    ce2571d2e74a5d4fdacf9c1bb0f82c2841f47678cc185bde14f446988d46c24c8c669be6044d3c734fae185aff482acddd19f32a16dfba45c86aacf44af15f84

  • SSDEEP

    6144:h1OgDPdkBAFZWjadD4s5sRb7rkfoQqxVAiB+1:h1OgLdaOMrkfoQqxmoG

Malware Config

Targets

    • Target

      e7535a14ed9e82119d78d222f5ceff79ec6529671dfcfc837aa673aab5b542ef

    • Size

      250KB

    • MD5

      bb05e733e82a8d997e8304fc4f432767

    • SHA1

      cd93cf122a487163c69f0159176ef63a154ae274

    • SHA256

      e7535a14ed9e82119d78d222f5ceff79ec6529671dfcfc837aa673aab5b542ef

    • SHA512

      ce2571d2e74a5d4fdacf9c1bb0f82c2841f47678cc185bde14f446988d46c24c8c669be6044d3c734fae185aff482acddd19f32a16dfba45c86aacf44af15f84

    • SSDEEP

      6144:h1OgDPdkBAFZWjadD4s5sRb7rkfoQqxVAiB+1:h1OgLdaOMrkfoQqxmoG

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v6

Tasks