General

  • Target

    88c95bdf93ecab8666c77b3298da7df24a237d3d465663422275d2087b139142

  • Size

    62KB

  • Sample

    221203-c77m6agf47

  • MD5

    fa23dc83401256266bf57c926f3272cc

  • SHA1

    a7c4db37d19996f75a34f14e9d182ddb4af2bcc3

  • SHA256

    88c95bdf93ecab8666c77b3298da7df24a237d3d465663422275d2087b139142

  • SHA512

    3c1c398c7945b3279997f22e8140b3313260220b269d95e4bd42bf7b9074f6b1547700d94fb52ed74fa78ea09d96bd6fa83951e2105829e2870cc58bd4d0fac0

  • SSDEEP

    1536:xEL4zpeiEsM8MQITtbaJf3zlqcPNsmu3dni0A:Ugw8NpkSNsXVy

Malware Config

Targets

    • Target

      88c95bdf93ecab8666c77b3298da7df24a237d3d465663422275d2087b139142

    • Size

      62KB

    • MD5

      fa23dc83401256266bf57c926f3272cc

    • SHA1

      a7c4db37d19996f75a34f14e9d182ddb4af2bcc3

    • SHA256

      88c95bdf93ecab8666c77b3298da7df24a237d3d465663422275d2087b139142

    • SHA512

      3c1c398c7945b3279997f22e8140b3313260220b269d95e4bd42bf7b9074f6b1547700d94fb52ed74fa78ea09d96bd6fa83951e2105829e2870cc58bd4d0fac0

    • SSDEEP

      1536:xEL4zpeiEsM8MQITtbaJf3zlqcPNsmu3dni0A:Ugw8NpkSNsXVy

    • Deletes itself

    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Accesses Microsoft Outlook profiles

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks