General

  • Target

    bfbc717b7aba02c3f8c58b526ea31bf15bf3d5f253843642c9f8f95ae9bc9842

  • Size

    330KB

  • Sample

    221201-w22z9sgb26

  • MD5

    6b1f120e72f9d471ee3670d1f9a30407

  • SHA1

    36163a4be9f709920e0af703b0d80a15bc93a033

  • SHA256

    bfbc717b7aba02c3f8c58b526ea31bf15bf3d5f253843642c9f8f95ae9bc9842

  • SHA512

    d614a8b565c180063afa1c2d3d7d1ed12983bfef2c70597f0314f3ce4cf2ff2c11999be2353a466416c482404cba8b82fcc4c70db31bfc27a125787ab7c42aed

  • SSDEEP

    768:n6LsIPqz607rzET3PAEAVSqK5Y9rBydJfXF8Di:n6AISzv7ET/5qeY99Ud

Malware Config

Targets

    • Target

      bfbc717b7aba02c3f8c58b526ea31bf15bf3d5f253843642c9f8f95ae9bc9842

    • Size

      330KB

    • MD5

      6b1f120e72f9d471ee3670d1f9a30407

    • SHA1

      36163a4be9f709920e0af703b0d80a15bc93a033

    • SHA256

      bfbc717b7aba02c3f8c58b526ea31bf15bf3d5f253843642c9f8f95ae9bc9842

    • SHA512

      d614a8b565c180063afa1c2d3d7d1ed12983bfef2c70597f0314f3ce4cf2ff2c11999be2353a466416c482404cba8b82fcc4c70db31bfc27a125787ab7c42aed

    • SSDEEP

      768:n6LsIPqz607rzET3PAEAVSqK5Y9rBydJfXF8Di:n6AISzv7ET/5qeY99Ud

    • Reads data files stored by FTP clients

      Tries to access configuration files associated with programs like FileZilla.

    • Reads local data of messenger clients

      Infostealers often target stored data of messaging applications, which can include saved credentials and account information.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks