General

  • Target

    9335e9c1a3a8da54429ee249c9c02ae15282f66739db9b71f3acea5376db10ff

  • Size

    250KB

  • Sample

    221202-bvldqaea4t

  • MD5

    119b523bb75fd5c5ce489e46e0eb19a9

  • SHA1

    608c2dd84cd53c36b45c8010fdb6c13280fb452c

  • SHA256

    9335e9c1a3a8da54429ee249c9c02ae15282f66739db9b71f3acea5376db10ff

  • SHA512

    8b950bbca887c6925c3df7d80345c63d443b25e9cdafc5565d3b9be00db7134c92613b0e9e6ca8378f90535948a3e1e7ba8ca86c8180d751dd2f26a42e634862

  • SSDEEP

    6144:h1OgDPdkBAFZWjadD4s5/n99WbJOHoGw/fxl4AE:h1OgLdaO/WbJqoGul41

Malware Config

Targets

    • Target

      9335e9c1a3a8da54429ee249c9c02ae15282f66739db9b71f3acea5376db10ff

    • Size

      250KB

    • MD5

      119b523bb75fd5c5ce489e46e0eb19a9

    • SHA1

      608c2dd84cd53c36b45c8010fdb6c13280fb452c

    • SHA256

      9335e9c1a3a8da54429ee249c9c02ae15282f66739db9b71f3acea5376db10ff

    • SHA512

      8b950bbca887c6925c3df7d80345c63d443b25e9cdafc5565d3b9be00db7134c92613b0e9e6ca8378f90535948a3e1e7ba8ca86c8180d751dd2f26a42e634862

    • SSDEEP

      6144:h1OgDPdkBAFZWjadD4s5/n99WbJOHoGw/fxl4AE:h1OgLdaO/WbJqoGul41

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v6

Tasks