General

  • Target

    87b8dfde1aa02de6bc7060e980ab6adf2a5158967a8b92177b97378aca5ac405

  • Size

    194KB

  • Sample

    221202-bvrwhaad62

  • MD5

    e4ff3c97e90a3854a7d66e0474ac1bf8

  • SHA1

    6131c4a787c91f9b17a5a48f557e6b567cedb0b0

  • SHA256

    87b8dfde1aa02de6bc7060e980ab6adf2a5158967a8b92177b97378aca5ac405

  • SHA512

    b6134904001c8d4d4267534d46d790f7a0b8433c1ac73da2da11ccb4ff51859596b578fd4b1aa6d4dfc44e20b96579de7e398d544957be565abae21a78eef868

  • SSDEEP

    3072:hn1/uEAgDPdkBlyFZ+ScjaiKWbETBquAEXlqsUUypbXZc410uGg+QUWSR:h1OgDPdkBAFZWjadD4s5OJcWviR

Malware Config

Targets

    • Target

      87b8dfde1aa02de6bc7060e980ab6adf2a5158967a8b92177b97378aca5ac405

    • Size

      194KB

    • MD5

      e4ff3c97e90a3854a7d66e0474ac1bf8

    • SHA1

      6131c4a787c91f9b17a5a48f557e6b567cedb0b0

    • SHA256

      87b8dfde1aa02de6bc7060e980ab6adf2a5158967a8b92177b97378aca5ac405

    • SHA512

      b6134904001c8d4d4267534d46d790f7a0b8433c1ac73da2da11ccb4ff51859596b578fd4b1aa6d4dfc44e20b96579de7e398d544957be565abae21a78eef868

    • SSDEEP

      3072:hn1/uEAgDPdkBlyFZ+ScjaiKWbETBquAEXlqsUUypbXZc410uGg+QUWSR:h1OgDPdkBAFZWjadD4s5OJcWviR

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks