General

  • Target

    63019700190537491f73e126552c4b01a1a9fdac40ba68ee64b6cd841b6f02b6

  • Size

    245KB

  • Sample

    221202-w665sacc89

  • MD5

    2e4efab0129117c93c0de5c25b571630

  • SHA1

    a7d7644c129d6ed70221eefdca3ba0c11b7f3853

  • SHA256

    63019700190537491f73e126552c4b01a1a9fdac40ba68ee64b6cd841b6f02b6

  • SHA512

    f212c2b147a2d0b60167ab1b6e3674f06ea5649a66008209c0b6f0f241b296432e19b4e312af922a01cacc4df7fff6ff1c260f5a29da9bd9f17062d86adcdb02

  • SSDEEP

    6144:h1OgDPdkBAFZWjadD4s5B3Tr0epa50xqDIN:h1OgLdaOlr0e850xqkN

Malware Config

Targets

    • Target

      63019700190537491f73e126552c4b01a1a9fdac40ba68ee64b6cd841b6f02b6

    • Size

      245KB

    • MD5

      2e4efab0129117c93c0de5c25b571630

    • SHA1

      a7d7644c129d6ed70221eefdca3ba0c11b7f3853

    • SHA256

      63019700190537491f73e126552c4b01a1a9fdac40ba68ee64b6cd841b6f02b6

    • SHA512

      f212c2b147a2d0b60167ab1b6e3674f06ea5649a66008209c0b6f0f241b296432e19b4e312af922a01cacc4df7fff6ff1c260f5a29da9bd9f17062d86adcdb02

    • SSDEEP

      6144:h1OgDPdkBAFZWjadD4s5B3Tr0epa50xqDIN:h1OgLdaOlr0e850xqkN

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

MITRE ATT&CK Enterprise v6

Tasks