General

  • Target

    780f235153eb9d68cb11414acce844c0013ab39c4102df9ded7d05075b51ec34

  • Size

    313KB

  • Sample

    221201-hzl95sab3v

  • MD5

    66d9e6b4d1d67f27973a41de3268b2db

  • SHA1

    d09923f26433981d234e8284961e8d8d49dbbc60

  • SHA256

    780f235153eb9d68cb11414acce844c0013ab39c4102df9ded7d05075b51ec34

  • SHA512

    a9c39e81847f45b35e0af3426328d0984c43e7ba9bd8cfe31033a6b9926800e32ad25f646295b20298fe350f3dc91d7db92fc09ff1a3a41f6ca62125f9da7b42

  • SSDEEP

    6144:91OgDPdkBAFZWjadD4sK4udQfJ2O8ElJH6XbExmy1SRJqpkT2Lw0Fk:91OgLdai6QlTHlD1S3hTctk

Malware Config

Targets

    • Target

      780f235153eb9d68cb11414acce844c0013ab39c4102df9ded7d05075b51ec34

    • Size

      313KB

    • MD5

      66d9e6b4d1d67f27973a41de3268b2db

    • SHA1

      d09923f26433981d234e8284961e8d8d49dbbc60

    • SHA256

      780f235153eb9d68cb11414acce844c0013ab39c4102df9ded7d05075b51ec34

    • SHA512

      a9c39e81847f45b35e0af3426328d0984c43e7ba9bd8cfe31033a6b9926800e32ad25f646295b20298fe350f3dc91d7db92fc09ff1a3a41f6ca62125f9da7b42

    • SSDEEP

      6144:91OgDPdkBAFZWjadD4sK4udQfJ2O8ElJH6XbExmy1SRJqpkT2Lw0Fk:91OgLdai6QlTHlD1S3hTctk

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v6

Tasks